What happened?
Emergency patches have been released for two critical security vulnerabilities found in PHP. The flaws put websites running PHP at risk, and findings had already surfaced that they were actively exploited before the patch.
Why it matters
Since PHP powers a large share of websites, flaws like these affect a broad ecosystem rather than individual sites. In recent days, reports noted that some sites were temporarily taken offline and that government sites were also affected.
What to do
Site administrators should check their PHP version and move to the patched release. If updating is not possible, temporary mitigations and server-side protection layers should be put in place. In Turkey, the Cybersecurity Presidency had also issued a notice on the issue.
