[The "Internet Foundation" PHP exposes high-risk vulnerabilities, and massive websites around the world face the crisis of being completely taken over] BlockBeats News: On October 21st, according to Huntress, a security crisis that may affect a massive number of websites worldwide is brewing. PHP, a popular programming language used to build the Internet, has been exposed to have two extremely serious security vulnerabilities. Due to the early leakage of relevant information, PHP officials have been forced to announce the urgent release of security patches to October 21st. It is reported that PHP is the underlying cornerstone of many website building systems, enterprise websites, and various network control panels, such as WordPress and WordPress. Because it is ubiquitous, once its core problems, it is equivalent to a crack in the entire Internet infrastructure. These two vulnerabilities have been officially rated as the highest risk level and belong to the "remote code execution" vulnerability, codenamed "PHP2Shell". Simply put, it's like a hacker finding a master key that can directly open the server door. The attacker only needs to send a specially crafted network request to the affected website to execute any command on the server and completely take over the system. Even more tricky is that the technical details regarding this vulnerability have not yet been fully disclosed, which means that the defenders are in an extremely passive state before the patch is released. Due to someone leaking this information in advance on the forum on October 20th, in order to prevent hackers from taking advantage of it, the official had to advance the original plan to 10am Eastern Time on October 21st. Although patches are about to be released, security teams around the world are investigating potential intrusions by monitoring server "abnormal behavior" without any technical details. Huntress, a cybersecurity company, pointed out that when hackers successfully exploit this vulnerability, they often reveal their vulnerabilities. For example, a PHP program that was originally only responsible for processing web page requests may suddenly and abnormally start a command-line terminal (such as bash), run an interpreter such as Python, or call tools such as curl to download malicious files. If such abnormal linkage operations suddenly occur on the website server, it usually means that hackers have been quietly active in the background. Huntress stated that for various types of businesses and website administrators, the time left for them is already very tight. Before the patch is released, the most urgent task is to conduct a comprehensive inventory of all places within the company where PHP is running, including not only external web servers, but also to investigate PHP environments hidden in product devices or control panels. Once the patch is released, it must be prioritized for systems exposed to the public network to be patched as soon as possible. In addition, if a company is still using an old version of PHP that has long been discontinued from maintenance, it is likely to not wait for official repairs and must immediately take isolation measures such as network disconnection or upgrade. At the same time, for ordinary netizens, if they encounter temporary emergency maintenance or inability to access certain websites in the near future, it is likely that major platforms are racing against time to repair this "door" to resist this potential online storm. [Original link]