NSA advises taking PHP sites offline due to passwordless command execution flaw

The National Security Agency advised organizations to take vulnerable websites offline rather than patch them after discovering severe flaws in PHP that allowed unauthorized command execution without a password. Several European countries, including France, Germany, and the Netherlands, temporarily took down government sites in response to the advisory. Open article →