Technology
PHP2Shell Vulnerability: Critical PHP Flaw Allows Website Takeover Without a Password, Patch Released
Two critical flaws in PHP, the software that runs a large share of the world websites, can let an attacker take over a website server without any password. The flaws, grouped under the name PHP2Shell by security firm Wiz, were patched in an emergency release on October 21, and reports of exploitation attempts began the same day. Website owners who have not updated are being urged to patch immediately.