
PHP issues urgent patches for two critical unauthenticated remote code execution flaws
Two critical vulnerabilities in PHP allow attackers to execute code remotely without credentials, affecting all web-serving deployments using supported versions.
Everything Firewall Scoop has reported about web security: 5 stories, newest first. Part of our Cyber Attacks coverage.

Two critical vulnerabilities in PHP allow attackers to execute code remotely without credentials, affecting all web-serving deployments using supported versions.

Hacktivist groups target misconfigured public services rather than breaking strong encryption, making visibility and default hardening the primary defense against ideological disruption.

Drive-by downloads exploit software flaws to install malware without your consent, meaning your caution alone cannot prevent the infection if your system is unpatched.

Default server configurations often expose file structures, turning your web server into an open directory for automated scanners to index and exploit.

Bot protection works by analyzing behavior patterns rather than just checking credentials, allowing systems to distinguish human intent from automated scripts.