Web services face confirmed attacks through critical PHP weaknesses

Daily Cyber News: Web services face confirmed attacks through critical PHP weaknesses Internet-facing PHP systems are under active attack through two critical memory-safety weaknesses. Successful exploitation can allow an unauthenticated attacker to execute code on an affected server. Researchers reported working remote code execution, and the flaws were added to the US government’s known-exploited list. Key context: PHP supports a substantial share of web applications, so every deployment serving web requests may need review. For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News. Cybersecurity training, courses, books, and resources: BareMetalCyber.com. Topics: cybersecurity news, cybersecurity, cyber risk, remote code execution, services, face, confirmed, attacks, critical, weaknesses.