Critical Cybersecurity Alerts: Linux, Python, PHP2Shell
Three separate critical vulnerabilities are in active exploitation: Linux has two unpatched 9.0/10 severity flaws allowing unauthenticated server takeover, Python's certificate authority was compromised with 8 keys exposed, and PHP2Shell saw millions of exploit attempts within hours of disclosure.
What we know
An account on X broke news of two Linux kernel vulnerabilities rated 9.0/10 with no official patches yet, one enabling unauthenticated server control; retweeted by another account on X. Another account on X amplified the Python CA compromise: 8 certificate authority keys were exposed (each a number below 256), potentially allowing attackers to intercept HTTPS connections to python.org and PyPI. Another account on X highlighted Cloudflare data showing PHP2Shell went from thousands of exploit attempts pre-announcement to millions within 2 hours post-disclosure. Another account on X noted only ~11% of exposed P2PShell services globally have been patched. Japan's Finance Minister commented that Japanese financial institutions had handled the PHP issue 'relatively smoothly'. Another account on X offered a pithy take: 'If your company refers to engineers as the IT department, you were already breached last week.'
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.