Researchers studying cybersecurity are drawing attention to an increase in automated attacks by several botnets, including Mirai, Gafgyt, and Mozi, that target PHP servers, IoT devices, and cloud gateways.
In a research shared with The Hacker News, the Qualys Threat Research Unit (TRU) stated that these automated attacks take advantage of cloud misconfigurations and known CVE vulnerabilities to take over unprotected systems and grow botnet networks.
According to the cybersecurity firm, because content management systems like WordPress and Craft CMS are so widely used, PHP servers have become the most common targets of these attacks. Because many PHP deployments may have outdated plugins and themes, unsecured file storage, and misconfigured settings, this in turn leads to a wide attack surface.
The following is a list of some of the major PHP framework flaws that threat actors have taken use of read more about Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.