AI & Enterprise
PIPC warns of personal data leaks linked to PHP security flaw
South Korea\'s Personal Information Protection Commission urged personal data handlers, including public institutions and private companies, to strengthen safeguards to prevent leaks linked to a recently disclosed PHP security vulnerability. The flaw, dubbed PHP2Shell, could allow attackers to run malicious commands on web servers without logging in or authentication. The commission warned of possible web server compromise and exposure of user data stored in linked databases, and called for security updates and tighter access controls.