PHP严重漏洞：OpenAI与Google旗下Wiz发现的古老漏洞引发互联网恐慌
美国国家安全局（National Security Agency）警告称，广泛使用的网页编程语言PHP中存在两个严重漏洞，需要紧急处理。PHP Foundation（PHP基金会）已发布补丁。该机构建议，无法立即打补丁的网站应先下线，直到修补完成。这些漏洞是使用OpenAI和Google旗下Wiz的AI工具发现的，研究人员在已知攻击出现之前就已将其报告。网站运营者被敦促更新至当前PHP版本8.5.12。
0 位关注者
最新
Warning websites may go dark as critical fix prepared
The developers of the PHP programming language are releasing patches for two critical vulnerabilities. PHP is used across large parts of the internet. Its security update rates both flaws 9.2 out of 10 on the CVSS v4.0 severity scale and urges users to upgrade once the release is available. The European Union Computer Emergency Response Team warned the flaws could allow attackers to run malicious code without logging in, and advised organisations that cannot patch to consider taking affected sites offline. The Australian Cyber Security Centre said it is not aware of active exploitation.