Two Dangerous Internet Security Issues Are Putting Site Admins On Edge

https://www.engadget.com/img/gallery/two-dangerous-internet-security-issues-are-putting-site-admins-on-edge/l-intro-1792580279.jpg

Both problems could result in large-scale attacks and require massive cleanup.

R.bussarin/Shutterstock

The web is a bit of a hot mess today following the discovery of two severe vulnerabilities, according to security releases seen by Ars Technica. The first involves TLS certificates with extremely weak encryption that could affect everything from VPNs to IoT devices. The other is a severe PHP programming language vulnerability impacting CMS systems including WordPress and Drupal. Both problems could result in large-scale attacks and require massive cleanup jobs, security experts said.

gPHP Foundation said on X that it's releasing security patches for two critical vulnerabilities rated 9.2 out of 10 on the severity scale. Ahead of the release today at 14:00 UTC (10AM ET), the group said that "PHP users are encouraged to prepare to update," adding that it will issue an "earlier release if details become public or active exploit evidence."

The advisory...

Copyright of this story solely belongs to www.engadget.com. To see the full text click HERE

Read more