Attackers are hiding PHP scripts in EXIF headers of JPEG images to hack websites, just by uploading an image. An unusual steganographic technique that an attacker can use to implant a malicious ...

Two updates pushed to the PHP Git server over the weekend added a line that, if run by a PHP-powered website, would have allowed visitors with no authorization to execute code of their choice.

A critical vulnerability in the PHP programming language can be trivially exploited to execute malicious code on Windows devices, security researchers warned as they urged those affected to take ...

PHP official code base migrated to GitHub. As a precaution following this incident, PHP maintainers have decided to migrate the official PHP source code repository to GitHub.