Honeypots have detected probes for a PHP vulnerability CVE-2024-4577, first found by Orange Tsai and elaborated by Watchtwr Labs. The vulnerability, which could potentially lead to OS command injection when PHP is used in CGI mode, allows attackers to bypass the Apache escape process. An exploit matching this pattern was detected. PHP released updates last week to address the vulnerability.

MetroHealth to push insurance sign-ups to curb $1M daily charity care costs
Cleveland-based MetroHealth plans to launch an initiative to help patients enroll in Medicare, Medicaid and ACA’s marketplace insurance to reduce its soaring charity care costs