Critical PHP Fixes Put Crypto Checkout Infrastructure In Focus

TL;DR: PHP released fixes for two critical flaws on October 21 and urged immediate updates. Crypto businesses using PHP-based web infrastructure should check that layer of their systems; the advisory does not announce a breach of Bitcoin or BTCPay Server itself. Security work for a crypto business does not end at its wallet. A critical PHP update has put ordinary web-server software back on the operational agenda. The PHP project’s October 21 advisory identifies two vulnerabilities that can allow unauthenticated remote code execution. Fixed upstream releases are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The project strongly encourages affected users to update immediately. It says installations serving web requests are at risk and highlights the Apache mod_php configuration as particularly exposed. Distribution vendors may provide patched packages, so the applicable fix depends on how the software is supplied and maintained. A Payment Stack Contains More Than Its Payment Processor The connection to crypto commerce is practical. BTCPay Server’s official documentation explains how merchants can connect its payment system to WooCommerce, including arrangements involving an existing store ...