NSA Warns: Patch Critical PHP Flaws or Take Systems Offline — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- NSA warned organizations using PHP to immediately update or take systems offline, after AI-discovered critical vulnerabilities took government websites offline worldwide (per Reuters)
- Node.js patched four high-severity vulnerabilities in its latest release — one allowing remote code execution and two enabling TLS validation bypass that could let attackers impersonate servers
- LiteLLM was compromised when an attacker injected malicious code into releases published to PyPI, Docker Hub, and GHCR, deploying an info-stealer targeting cloud and AI credentials plus a remote access trojan
- eMudhra, an Indian certificate authority, had its private keys compromised, potentially allowing attackers to issue fraudulent certificates — security pros called the resulting cleanup "bigger than Heartbleed"
- Recent days added TiDB Cloud's breach, exploits of four patched Plex Media Server flaws collectively dubbed Plex2Shell, and a BeyondTrust zero-day in its Remote Support product that had been exploited since August
- The source notes the incidents are unrelated but their convergence highlights pressure on cybersecurity teams, particularly as AI could make vulnerability exploitation easier once flaws are discovered
Why it matters: Cybersecurity teams are now triaging simultaneous critical failures across the stack — programming languages (PHP, Node.js), certificate infrastructure (eMudhra), and AI tooling (LiteLLM) — with the NSA's rare advice to take PHP systems offline and eMudhra's key compromise triggering what experts describe as a Heartbleed-scale cleanup.
Ask SkimNews
