🚨NSA Warns of Critical PHP Holes in 33M Sites
33 million sites at risk from critical PHP flaws
TL;DR
The NSA warns of critical security holes in PHP, affecting 33 million sites. Update to PHP 8.5.12 immediately to avoid infiltration risks.
The NSA has issued a warning about two critical vulnerabilities in PHP, impacting all versions since 2004. These flaws allow attackers to infiltrate servers or databases, making it crucial for developers to update their web servers to PHP 8.5.12. With PHP powering over 70% of the internet, including popular CMS like WordPress, this update is imperative to avoid potential exploits. The flaws were found by security researchers using AI tools like GPT-5.6 Sol and Wiz Atlas, highlighting the growing role of AI in cybersecurity.
Key Points
NSA warns of two critical PHP vulnerabilities affecting 33 million sites.
Vulnerabilities allow attackers to infiltrate servers or databases; update to PHP 8.5.12.
PHP powers over 70% of the internet, including popular CMS like WordPress.
Flaws were found by security researchers using AI tools like GPT-5.6 Sol and Wiz Atlas.
No exploits reported in the wild, but NSA urges immediate updates or site removal.
Why It Matters
If you're running a WordPress site or any PHP-based web application, updating to PHP 8.5.12 is crucial. The vulnerabilities could allow attackers to infiltrate your server's file system or database, compromising security. With 33 million sites at risk, this update is not just a recommendation but a necessity.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,565 builders reading daily.