Signals at National Cyber Security Centre of PHP vulnerability abuse

The National Cyber Security Centre (NCSC) has reported attempts to exploit a significant vulnerability in PHP, with some successful breaches already detected. The NCSC advises companies to update their systems promptly, as attempts to misuse the flaw have been circulating since yesterday. While many websites have been secured with updated PHP versions, approximately 145,000 remain potentially vulnerable. The vulnerability caused major disruptions, including the downtime of RTL Nieuws and several government sites, as well as login issues for municipalities using Notubiz. A solution was made available later in the day, allowing many sites to come back online.