Government agencies and companies around the world took websites and online services offline on Wednesday as cybersecurity officials warned that critical flaws in PHP, a programming language widely used to build websites, could allow hackers to take control of vulnerable servers.
\n\nThe US National Security Agency (NSA) urged organisations to immediately install security patches or take affected systems offline until they can be secured. India's cybersecurity agency CERT-In also classified the vulnerabilities as critical, warning of a high risk of remote code execution and complete system compromise.
\n\nPHP is an open-source programming language used to build websites and web applications, allowing web servers to generate dynamic content. The technology underpins popular web design platforms and is used across a wide range of services, from online stores and news websites to government portals.
\n\nThe vulnerabilities, collectively dubbed “PHP2Shell”, could allow attackers to execute malicious code on affected servers without needing a password or prior access. Successful exploitation could enable them to steal sensitive data, disrupt services or gain access to a server's file system or database.
\n\nAccording to CERT-In's advisory dated October 21, the flaws affect PHP versions earlier than 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The agency said the vulnerabilities stem…
Original source: https://www.cnbctv18.com/technology/
