Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
The PHP Foundation acknowledged delays in fixing a critical security vulnerability first identified in 2024 and described the lapse as an organizational structural failure, Cointelegraph reported.
In a statement released after distributing an emergency security patch on Oct. 21, local time, the foundation said decision-making problems in its security response process and a shortage of developers delayed the fix for an extended period. The two vulnerabilities identified this time involve flaws that could let attackers remotely execute code on affected servers without any separate login or authentication. According to the foundation, developers first detected signs of the issue in 2024 but struggled to devise a solution while weighing the impact on the PHP-based software ecosystem.
The foundation added that Calif and OpenAI independently reported the same underlying issue on Aug. 11, local time, and Calif demonstrated that unauthenticated remote code execution was possible, raising the priority of the response. As security concerns spread, some government websites and online services in European countries including the Netherlands, Finland, France and Germany were temporarily suspended. Australia’s government cybersecurity website was also found to have been affected.
Separately, Binance founder Changpeng Zhao said some website operators may not have applied the security patch and urged users to be cautious when accessing websites over the next few days.