Nasty bug with very simple exploit hits PHP just in time for the weekend With PoC code available and active Internet scans, speed is of the essence.

Attackers were able to place malicious code in the PHP central code repository by impersonating key developers, forcing changes to the PHP Group's infrastructure.

PHP is widely known as an interpreted language. But with PHP version 8, the language was given a Just In Time (JIT) compiler. According to PHP folks at Zend, that JIT compiler could pave the way for ...