Last week, two critical flaws were announced in a programming language called PHP, which is used in roughly 70 percent of websites.
And it's still running many systems, including city websites.”
(About half of the Internet-connected PHP software is one of the older versions for which there currently is no patch, Klein says.
(Ransomware actors have attacked governments before, including shutting down IT systems for school districts or stealing and threatening to release police files.)
Events like the PHP exploits demonstrate a new normal, in which more vulnerabilities are found and exploited faster than we’re used to, Klein says.