FBI tells organisations to take systems offline if they cannot patch AI-found PHP flaws hackers are already exploiting
Computer hackers, as Cloudflare CEO Matthew Prince warned attackers were already probing the PHP vulnerability in the ten hours before its public disclosure, with around 70% of websites thought to be affected.
Amazon Web Services says the two 'PHP2Shell' flaws are 'now being broadly exploited in the wild'. Cloudflare chief executive Matthew Prince said exploitation attempts jumped from thousands to tens of thousands within 45 minutes of the announcement. The Office for Budget Responsibility pulled its website a week before the Budget. Scotland Secretary Douglas Alexander insists there is no breach of Budget security.
Oxford City Council and the City of Edinburgh Council have both taken their websites offline.
Finland has shut down its government's public web services.
Drupal's Tiffany Farriss: 'All servers using any version of PHP released in the last 20 years' are vulnerable.
