EU cyber team warns websites to go offline over critical PHP vulnerabilities

Europe's cyber emergency team has advised websites unable to patch two critical PHP vulnerabilities to consider going offline, as the flaws could allow attackers to take over servers without a login. Details of the vulnerabilities leaked online before fixes were ready, with early attacks already reported by Cloudflare. The vulnerabilities affect all PHP releases from version 5 onward, potentially leaving many WordPress and Magento sites exposed.