Two Critical PHP Bugs, Cleanup Still Underway: Wiz CTO on a Coming 'Vulnpocalypse'
One-line summary: Two critical bugs hit PHP, the open source language behind roughly 70% of websites, last week, and the cleanup is far from over.
Key points
- Two critical bugs were found in PHP last week. The open source language runs roughly 70% of websites.
- Many organizations scrambled to fix their systems, and some took sites offline until the vulnerabilities were patched.
- The story may have faded from feeds, but the remediation work has not finished.
- TechCrunch calls the issue "PHP2Shell" and published a video with Wiz's CTO on what it sees as a coming "vulnpocalypse."
Why it matters
PHP's reach is so wide that a single critical flaw can mean broad exposure. Patching and verification continue well after the headlines move on, so operators of PHP-based sites should confirm for themselves that their own environments have been fixed.