Nasty bug with very simple exploit hits PHP just in time for the weekend With PoC code available and active Internet scans, speed is of the essence.

Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating TellYouThePass group opportunistically infects servers that have yet to update.

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide.