Researchers Say Hackers Targeted PHP Before Flaws Were Known
· Technology · Bloomberg, India Today
Hackers attempted to exploit security vulnerabilities in the widely used programming language PHP several days before the flaws became public, according to cybersecurity researchers at Amazon.com Inc. The malicious activity targeted unpatched systems before developers released official advisories or software updates to fix the security gaps. Researchers observed the attempted exploitation attempts while monitoring network traffic patterns across various enterprise deployments. The timing of the attacks indicates that malicious actors may have discovered the vulnerabilities independently or obtained details ahead of public disclosure. Security teams urge system administrators to apply the latest PHP updates immediately to protect against ongoing exploit attempts.
Why it matters
Software developers and IT administrators managing web servers running PHP face immediate risks from pre-disclosure cyberattacks exploiting unpatched vulnerabilities.
Read the original report — Bloomberg
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.