CISA, security researchers confirm successful exploitation of PHP flaws Cybersecurity Dive