U.S. cybersecurity agency CISA has confirmed that hackers are now actively exploiting a pair of critical security vulnerabilities in the widely used PHP web software and has ordered civilian federal agencies within the U.S. government to fix their systems within the next three days.
