Attackers were observed leveraging a critical remote execution vulnerability in PHP to compromise servers and deploy malware that’s part of a TellYouThePass ransomware campaign. In a June 10 blog post, Imperva Threat Research said they found attackers exploiting the high-severity PHP flaw — CVE-2024-4577 — as early as June 8, just a day or two after PHP’s maintainers released a patch.

Source: SC Magazine