Global Cybersecurity Alerts Issued Over Critical PHP and eMudhra Vulnerabilities
· Technology · India Today, Indian Express
The cybersecurity landscape faced significant disruption over the past 24 hours due to critical vulnerabilities in the PHP programming language and security flaws at Indian certificate authority eMudhra. The PHP Foundation released an emergency update for two critical flaws, collectively termed PHP2Shell, which could allow attackers to gain server control without authentication. The US National Security Agency and the FBI have advised organizations to apply the patch immediately or take affected systems offline. Meanwhile, eMudhra was found to have utilized weak private keys for issuing intermediate digital certificates. These incidents have led to precautionary service outages for government websites in countries including Finland and the Netherlands.
Why it matters
The vulnerabilities affect approximately 70 per cent of global websites using PHP, posing a widespread risk of unauthorized server access and data compromise.
Read the original report — India Today
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.