Critical PHP flaws: What to watch for and what to update
Hello Malwarebytes Customer,
Emergency security updates are now available for two critical vulnerabilities in PHP, the programming language that powers many websites and web applications.
Known as PHP2Shell, these flaws could let attackers run malicious code on an affected server without logging in. They could steal business data, change website content, or use a trusted website to target visitors with phishing pages and malicious downloads.
If you’re a website visitor:
Some websites may temporarily go offline while they are patched.
Watch for unexpected content, downloads, or redirects, and repeated login requests, even on familiar sites.
If something looks wrong, leave the page.
You don't need to install PHP updates on your own device.
If you’re a website owner:
Ask your hosting or IT provider to confirm PHP fixes are installed, not just scheduled, across all your websites and applications.
If they can’t patch immediately, ask whether affected services should temporarily be taken offline.
Question
JGale
Hello Malwarebytes Customer,
Stay safe,
The Malwarebytes Team
@hikarateboy
0 answers to this question
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.