A critical vulnerability affecting all PHP versions on Windows devices has been discovered by the US Department of Health & Human Services. The flaw could let an attacker take control of a server. While the risk is hard to quantify, it is presumed that Windows systems running Japanese, traditional Chinese or simplified Chinese are vulnerable. Cybersecurity researchers have already detected attempts to exploit the flaw. The advice is to update the PHP installation to the latest version and to apply a ‘mod_rewrite’ rule to block attacks.

Crypto users targeted in SourceForge malware attack via fake Microsoft Office softwares
Cybercriminals are using SourceForge, an open-source software platform, to target crypto users with malware. Security experts at Kaspersky have found fake Microsoft Office installers containing