Widespread PHP Flaw May Cause Many Site Outages Today
2026-10-22T19:23:21Z•a7f93175346bfd26a9fa22047a15af253dc48dbd34c0366887eaca1de7483951
CryptomusMicrosoftPHPShinyHuntersactive-exploitationcybercrime-financedata-brokerdata-theftextortionmoney-launderingpatch-managementprivacyransomwareremote-code-executionsanctions-evasiontelecommunicationsweb-server-security
What happened
KrebsOnSecurity RSS items report a critical, actively exploited PHP vulnerability affecting nearly 70% of websites and potentially enabling full server compromise, alongside Microsoft's release of unusually large security updates covering more than 1,400 flaws. Additional reporting covers ShinyHunters data theft and extortion investigations, arrests and alleged ransomware-negotiation links, UK sanctions against Cryptomus for facilitating cybercrime-related payments and Russian sanctions evasion, telecommunications metadata theft, and privacy litigation involving data broker Radaris.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- a7f93175346bfd26a9fa22047a15af253dc48dbd34c0366887eaca1de7483951
- Enrichment time
- 2026-10-22T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.