TokenPost·
National Security Agency Urges Offline PHP Systems If Updates Aren’t Feasible

26 outlets reporting
11 hours
WAF protection lead
Two flaws can enable unauthenticated remote code execution. Cloudflare customers using its WAF had protections active nearly 11 hours before PHP’s scheduled release.