Huo Xing Cai Jing reports that Mitchell Amador, CEO of the bug bounty platform Immunefi, warned that internet users remain at risk of cyberattacks triggered by PHP vulnerabilities, particularly affecting smaller websites that are slow to implement emergency patches, which may take weeks to deploy. He stated that “bug apocalypse” is unfolding as planned—where the cost of discovering vulnerabilities has become low, while the cost of fixing them remains high. He advised users to treat any logged-in website over the coming weeks as potentially compromised, avoid password reuse, exercise caution when connecting crypto wallets, and revoke token approvals from unrecognized sources. Previously, the PHP Foundation acknowledged that due to resource constraints, it had delayed patching a critical security vulnerability first identified in 2024. On the same day, PHP developers released emergency patches for two severe vulnerabilities, but individual websites must still perform their own updates. Cloudflare CEO Matthew Prince noted that within 24 hours of the PHP vulnerability’s public disclosure, millions of exploitation attempts were recorded, with thousands already occurring prior to disclosure. According to W3Techs, PHP powers approximately 69% of websites with known server-side programming languages; these vulnerabilities could allow attackers to distribute malware or inject malicious scripts into websites. The U.S. Federal Bureau of Investigation’s cyber division also warned that these flaws could enable malicious actors to “remotely execute code within the PHP core, potentially compromising sensitive data and networks.” In a June interview with Cointelegraph, Amador previously warned that the proliferation of cutting-edge AI models has shifted the cybersecurity landscape, giving attackers the upper hand and contributing to the emergence of “bug apocalypse,” alongside a resurgence in DeFi hacks. Immunefi is the world’s largest bug bounty platform and has paid out $140 million in rewards to 650 protocols to date.
Immunefi CEO Warns of PHP Vulnerabilities and 'Vulnerability Doomsday'
MarsBitShare
Summary
Immunefi CEO Mitchell Amador warned that PHP vulnerabilities pose a threat to site security, particularly for smaller platforms lacking timely updates. He emphasized the increasing cost of fixes compared to early detection, urging users to avoid password reuse and carefully manage crypto wallet connections. The PHP Foundation delayed a 2024 patch due to resource constraints, while Cloudflare reported millions of attacks within 24 hours. The FBI highlighted risks related to remote code execution. Traders should assess the risk-to-reward ratio when evaluating exposure and monitor support and resistance levels in crypto markets amid heightened security concerns.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.