Defense One – Two critical flaws in software widely used in websites have the NSA, FBI, and Cybersecurity and Infrastructure Security Agency urging organizations to update their systems or take them offline immediately. The vulnerabilities affect PHP, a programming language that works behind the scenes to run websites, process forms, and retrieve information. Hackers could exploit the flaws to run commands on an affected server without logging in, potentially allowing them to steal data, change a website’s contents, or take control of it, the agencies said.

More at Defense One