01
Security
PHP flaws prompt urgent patching across the web as attack attempts climb
Organisations are still checking exposure, and experts warn the fallout may take months to fully emerge.
Organisations are still checking exposure, and experts warn the fallout may take months to fully emerge.
Defenders should not treat the public disclosure date as the earliest point at which the flaws were exploited.
Operators running PHP 8.1 or older face the most pressing risk, since no official fix is coming for those versions.
Affected servers need patches for a PHP bug, and some certificates from one authority may still be trusted by a macOS utility.
Operators running PHP on public sites face urgent patching, and no temporary workaround fully blocks the attacks.
Adobe has issued a fix, and merchants on affected versions need to update to close a path to code execution.