PANews, October 25 — China's National Information Security Vulnerability Sharing Platform (CNVD) has issued the "Security Advisory on the Analysis and Remediation Recommendations for a PHP Remote Code Execution Vulnerability." According to the advisory, affected users should closely follow official information, download and update to the latest version through official channels, and users who are temporarily unable to update can take measures to reduce some attack paths and mitigate the vulnerability threat, continuously monitoring behaviors such as abnormal termination of PHP processes, abnormal system command invocations, creation of unfamiliar processes and abnormal file writes, and retaining logs for traceability analysis.
In its protection recommendations, CNVD said that information system operating units should further strengthen security protection and comprehensively inventory their own network assets, narrowing the public-network exposure surface of information systems in accordance with the principle of "no internet access unless necessary"; units that do not yet have the conditions to remediate should adopt temporary response measures such as network isolation, network access restrictions and taking non-essential business systems offline.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
