UK National Cyber Security Centre

Headlines · 1

1. Oct 22
   UK checks exposure after AI-discovered critical PHP flaws spark global scramble

   The UK government said it is working to identify any potential exposure in its online services after critical cyber-security flaws were found in PHP, the programming language underpinning a significant number of the world's websites. According to the BBC, the flaws were first discovered by AI and went undetected for at least a decade; the UK's National Cyber Security Centre, along with EU and Australian counterparts, urged PHP users to apply fixes, and the NSA said the flaws often provide a direct path to a server's file system or database. Amazon said it detected a "PHP2Shell exploitation attempt" on 17 October against a honeypot system and further attempts on 21 October that varied in payload and anonymisation infrastructure, occurring after details leaked on social media but before an embargo was lifted.

   The Next Web · 🔥 0

Experience and discussion from the community

Share my UK National Cyber Security Centre experienceAsk about UK National Cyber Security Centre