Two critical vulnerabilities have been discovered in PHP, the technology powering millions of websites and applications worldwide. With severity ratings of 9.2 out of 10 and reports of potential remote code execution, these flaws could pose a serious threat to organizations around the world that use PHP. Emergency security patches are scheduled for release on October 21 at 10 AM ET.
What Should Your Organization Do To Protect Itself?
Join SANS for this emergency livestream, featuring Moses Frost, Senior Instructor at SANS Institute, and Rich Greene, Certified Instructor and Senior Solutions Engineer at SANS Institute, who will cut through the noise and explain what we know about these vulnerabilities, which systems may be affected, and exactly what security teams should do now.
What We Will Cover
- How to identify potentially vulnerable systems, including PHP running inside appliances, containers and vendor-hosted applications
- How to prioritize patching once the release lands
- How to address systems that cannot be immediately updated, or that are on a version that will not receive a fix
- What to watch for as exploitation attempts begin
Get the facts, understand the risks, and take action to protect your organization.
Watch live Wednesday, October 21 at 12 PM ET. No registration. If you miss it, the replay will be available on this page and on the SANS YouTube channel. A CPE-eligible replay will be posted to the SANS on-demand platform within [24 to 48] hours.
Additional External Resources
