CEO của Immunefi cảnh báo về các lỗ hổng PHP và 'Ngày tận thế của lỗ hổng'

The Huoxing Finance report states that Mitchell Amador, CEO of the bug bounty platform Immunefi, warned that internet users still face risks of cyberattacks triggered by PHP vulnerabilities, particularly affecting smaller websites that are slow to implement emergency patches, which may take weeks to complete. He stated that “Bug Doom” is on schedule—meaning the cost of discovering vulnerabilities has become cheap, while the cost of fixing them remains high. He advised users to treat any logged-in website over the coming weeks as potentially compromised, avoid password reuse, remain cautious when connecting crypto wallets, and revoke token approvals from unrecognized sources. Previously, the PHP Foundation acknowledged that due to resource shortages, it had delayed patching a critical security vulnerability first identified in 2024. On the same day, PHP developers released emergency patches for two critical vulnerabilities, but each website must still perform its own upgrade. Cloudflare CEO Matthew Prince noted that within 24 hours after the PHP vulnerability was publicly disclosed, millions of exploitation attempts were recorded, with thousands already occurring prior to disclosure. According to W3Techs, PHP supports approximately 69% of websites with known server-side programming languages; these vulnerabilities could allow attackers to distribute malware or inject malicious scripts into websites. The U.S. Federal Bureau of Investigation’s cyber division also warned that these vulnerabilities could enable malicious actors to “remotely execute code within the PHP core, potentially compromising sensitive data and networks.” Amador previously warned in a June interview with Cointelegraph that the proliferation of cutting-edge AI models has reshaped cybersecurity, giving attackers the upper hand and triggering “Bug Doom,” leading to a resurgence in DeFi hacks. Immunefi is the world’s largest bug bounty platform and has paid out $140 million in rewards to 650 protocols to date.