THIS IS NOT A DRILL! – If you manage a website running PHP, today would be a very good day to pay attention.
The PHP development team has taken the unusual step of announcing 2 emergency security patches before they’re even available. Both vulnerabilities carry a severity rating of 9.2 out of 10. Security researchers warn that attackers may begin exploiting them almost immediately after the fixes arrive.
The patches are scheduled for Wednesday, October 21, at 9:00 AM Central. However, PHP maintainers could release them earlier if additional technical details leak or they detect active exploitation. [Read more…]
A sinister campaign known as ShadowCaptcha is using over 100 compromised WordPress sites as unwitting hosts, redirecting visitors to fake CAPTCHA pages. These deceptive pages trigger malware delivery ranging from credential stealers to ransomware and cryptocurrency miners.