US government says hackers are now exploiting critical PHP web bugs

Automated excerpt

U.S. cybersecurity agency CISA has confirmed that hackers are now actively exploiting a pair of critical security vulnerabilities in the widely used PHP web software and has ordered civilian federal agencies within the U.S. government to fix their systems within the next three days. The bugs, known as PHP2Shell, exploit vulnerabilities in the software that went undiscovered for years. The bugs were initially uncovered two years ago but the nonprofit foundation that maintains the software said there was no practical way for hackers to exploit them, leaving the bugs unpatched.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.