PHP Attack Threatens Crypto Safety: Should You Cash Out or Pull Funds From Exchanges?

The FBI, National Security Agency (NSA), and Cybersecurity and Infrastructure Security Agency (CISA) have warned organizations to urgently patch two critical PHP attack dubbed “PHP2Shell,” which could let hackers take control of vulnerable servers without logging in. With PHP powering websites and web applications worldwide, the warning raises a pressing question for crypto safety: Should you cash out Bitcoin or pull funds from exchanges to protect your crypto? The PHP2Shell vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious code on vulnerable servers without authentication. Both flaws carry a critical CVSS v4.0 score of 9.2, prompting cybersecurity agencies to urge organizations to patch affected systems immediately.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptonews.