Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
AMSTERDAM, Netherlands: Government websites and online services across parts of Europe were taken offline on October 21 as authorities rushed to protect systems from critical vulnerabilities in the widely used PHP programming language that hackers had begun exploiting.
Summary
PHP developers identified two critical vulnerabilities on October 20 and urged users to update their sites once a fix became available.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
We've archived 445 other articles touching the same topic (cloudflare chief technology officer dane knecht, australia, w3techs) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.