[Immunefi CEO Warns PHP Vulnerability May Keep Websites Exploitable for Weeks] According to a report by Cointelegraph on October 26th, Immunefi CEO Mitchell Amador stated that internet users still face the risk of cyberattacks stemming from a PHP vulnerability, especially smaller websites that were slow to release patch updates last Wednesday, which may take weeks to complete. He called this a planned "vulnerability apocalypse," where discovering the vulnerability is cheap, but patching it is expensive. Amador advised users to treat any website login as potentially compromised in the coming weeks, avoid reusing passwords, be cautious about connecting encrypted wallets to websites, and revoke authorization for unidentified tokens. Previously, the PHP Foundation acknowledged a delay in patching a critical security vulnerability first discovered in 2024 due to resource shortages. PHP developers released emergency patches for two critical vulnerabilities on the same day, but websites still need to update themselves. Cloudflare CEO Matthew Prince stated that millions of exploit attempts were recorded within 24 hours of the vulnerability being disclosed, and thousands of attempts had already occurred before the disclosure. W3Techs estimates that PHP powers approximately 69% of websites using known server-side programming languages. The FBI's Cyber Division warns that the vulnerability could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."