Topic
Two critical PHP vulnerabilities capable of enabling unauthenticated remote code execution prompted operators and governments to patch systems and temporarily suspend some online services. Sources report a surge in exploitation attempts, but differ on when the fixes were released; no publicly confirmed compromise of a named organisation had been reported by 22 October.
1 article
Governments and companies suspended online services on October 21–22 as they rushed to fix two critical PHP flaws. Cloudflare reported millions of attempts to exploit the software, which powers websites worldwide.
