🧑💻 Due to two critical vulnerabilities in PHP, cybersecurity agencies advise taking websites offline, and the Netherlands has already done so.
PHP runs under a significant part of the internet: WordPress, Drupal, Joomla, Magento, hosting services and control panels. The vulnerabilities found allow remote code execution on the server without authorization.
Cybersecurity agencies of the UK, the EU, Australia and Japan urge installing updates immediately, and if that is not possible, taking the site offline or isolating it from the network.
PHP has promised to release the fix today at 14:00 UTC, a day earlier than planned due to a leak of details.
