> CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.