Attackers were able to place malicious code in the PHP central code repository by impersonating key developers, forcing changes to the PHP Group's infrastructure.

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide.

In June, 1995, Rasmus Lerdorf made an announcement on a Usenet group. You can still read it. Today, twenty five years on, PHP is about as ubiquitous as it could possibly have become. I’d be w… ...