PHP developers said Wednesday they would release patches for two critical vulnerabilities. Cyber agencies told organizations unable to patch to consider taking affected sites offline.
Why it matters: The flaws allow remote code execution, according to CERT-EU. Attackers could run their own code on servers without logging in.
Where they split: Coverage differs on whether attacks have begun: Cloudflare reports early attacks, while Australia's cyber agency said it knew of no active exploitation.
Center coverage, 29 sources: The center pairs the PHP flaws with a separate eMudhra certificate compromise, framing a broader day of web security strain.
Left coverage, 17 sources: The left frames the story around the risk of websites going down and agency warnings to pull sites offline.
What’s next: The patch was set for 14:00 UTC Wednesday. PHP said it would release earlier if details leaked or exploits appeared.
