关键信息
A critical security flaw affecting the PHP programming language has placed a significant portion of the internet at risk. This vulnerability impacts major platforms including Wikipedia, Slack, and Spotify, alongside a vast number of sites powered by WordPress.
The discovered security gap allows unauthorized remote code execution, potentially enabling attackers to delete data, inject malicious scripts, or hold systems for ransom. Reports indicate that hackers are already utilizing botnets to scan for vulnerable targets.
The PHP Foundation is developing a patch, which is scheduled for release on Wednesday, 21 Oct. 21, at 2 p.m. UTC. Until this update arrives, the vulnerability remains active, forcing many sites to transition to read-only modes or go offline entirely.
Various entities are responding to the threat, with services like Cloudflare deploying emergency protections. Meanwhile, critical infrastructure, including regional health-care providers and public utilities, have begun taking precautionary measures to mitigate potential exploitation.
