Thu, Oct 22 Vulnerabilities and patches
- Exploited
PHP flaws let attackers run code on web servers without a login
Cloudflare and Arctic Wolf have seen exploitation attempts, and PHP fixed both flaws in releases for its four supported branches.
PHP security advisory, source for item 1 on Thu, Oct 22Wiz, source for item 1 on Thu, Oct 22Cloudflare, source for item 1 on Thu, Oct 22Arctic Wolf, source for item 1 on Thu, Oct 22Unit 42, source for item 1 on Thu, Oct 22Cisco Talos, source for item 1 on Thu, Oct 22Canadian Centre for Cyber Security, source for item 1 on Thu, Oct 22