Cybersecurity News
Filters
Filtered by category: Krebs On Security, tag: patch management × Clear
Widespread PHP Flaw May Cause Many Site Outages Today
Matched: OpenAI
A critical pair of PHP vulnerabilities affecting roughly 70% of websites is being actively exploited, with working exploits already circulating. All PHP versions since 5.4 are affected, enabling remote code execution, denial-of-service, and data exposure. Fixes are available in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Cloudflare implemented firewall protections early today, while government sites in Europe have already gone offline. Researchers compare the severity to the 2021 Log4Shell flaw.
Microsoft Plugs Nearly 1,000 Security Holes
Matched: Artificial Intelligence
Microsoft released its largest-ever patch batch, fixing 974 security vulnerabilities across Windows and other software, bringing 2026's total past 2,600 — more than double the previous annual record. Two actively exploited zero-days allow privilege escalation. Microsoft attributes the surge partly to AI-assisted vulnerability discovery, though security experts warn organizations are struggling to test and deploy the growing volume of monthly fixes.