FBI tells organisations to take systems offline if they cannot patch the critical PHP flaw hackers are already exploiting
Computer hackers, as Cloudflare CEO Matthew Prince warned attackers were already probing the PHP vulnerability in the ten hours before its public disclosure, with around 70% of websites thought to be affected.
Amazon Web Services says the 'PHP2Shell' flaw is now 'being broadly exploited in the wild'. The National Cyber Security Centre has given UK organisations the same order: update immediately or consider going offline. The Office for Budget Responsibility pulled its website. Scotland Secretary Douglas Alexander insisted he had 'no indication whatsoever' of a breach of next week's Budget.
Cloudflare chief Matthew Prince said exploit attempts jumped to 'tens of thousands' within 45 minutes.
Oxford City Council, the City of Edinburgh Council and Finland's government took their sites down.
AI found the bugs, which Wiz called 'arguably' among the worst 'in software history'.