CZ警告加密货币用户：PHP漏洞引发全球安全争夺战，加密货币公司处于高度戒备状态

币安创始人 CZ 向加密货币用户发出严厉警告，因为关键的 PHP 漏洞（CVE-2026-109618、CVE-2026-109619）在全球范围内引发了数百万次利用尝试，迫使快速修补并引发了整个数字资产领域的担忧。

Binance founder Changpeng Zhao (CZ) isn't one to mince words, and his latest cybersecurity alert is echoing across the internet like a siren in Times Square. With two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, shaking the foundations of PHP—the programming language underpinning a colossal chunk of the web—CZ has urged crypto users to be extra vigilant. It's a classic case of 'better safe than sorry,' especially when unpatched systems can turn any website into a potential hazard for credential theft or worse.

币安创始人赵长鹏（CZ）并不是一个直言不讳的人，他最新的网络安全警报就像时代广场的警报一样在互联网上回响。由于 CVE-2026-109618 和 CVE-2026-109619 这两个严重漏洞动摇了 PHP（支撑大量网络的编程语言）的基础，CZ 敦促加密货币用户格外警惕。这是一个“安全总比后悔好”的经典案例，特别是当未打补丁的系统可能会将任何网站变成凭证盗窃或更严重的潜在危险时。

The PHP Panic: What's the Fuss?

PHP 恐慌：有什么大惊小怪的？

These aren't just your garden-variety software glitches. Rated with a severity score of 9.2 out of 10, these PHP flaws could allow bad actors to execute malicious code on servers without authentication. Think of it as leaving your front door unlocked in a bustling city—it's an open invitation for trouble. The PHP development team scrambled to release emergency updates on October 21st, pushing out patched versions (8.2.35, 8.3.36, 8.4.27, and 8.5.12) with a stern warning for administrators to update immediately.

这些不仅仅是普通的软件故障。这些 PHP 缺陷的严重性评分为 9.2（满分 10），可能允许不良行为者在未经身份验证的情况下在服务器上执行恶意代码。可以把它想象成在繁华的城市里不锁前门——这是公开招惹麻烦。 PHP开发团队于10月21日紧急发布紧急更新，推出补丁版本（8.2.35、8.3.36、8.4.27、8.5.12），并严厉警告管理员立即更新。

What's particularly unnerving is the speed at which these vulnerabilities are being exploited. Cloudflare's CEO, a company with a front-row seat to global web traffic, has reported millions of exploit attempts already. This isn't a targeted attack; it's a broad, automated sweep, and any website running an unpatched PHP version is a potential mark. The vulnerabilities stem from issues like memory corruption and accessible internal data after memory release, which in layman's terms means the system isn't cleaning up after itself, leaving digital breadcrumbs for hackers to follow.

尤其令人不安的是这些漏洞被利用的速度。 Cloudflare 的首席执行官是一家在全球网络流量方面处于领先地位的公司，该公司已报告了数百万次利用尝试。这不是有针对性的攻击；这是一次广泛的、自动的扫描，任何运行未打补丁的 PHP 版本的网站都是一个潜在的标记。这些漏洞源于内存损坏和内存释放后可访问的内部数据等问题，用外行人的话来说，这意味着系统不会自行清理，从而为黑客留下了数字痕迹。

Crypto's Tightrope Walk: Shared Infrastructure, Shared Risk

加密货币的走钢丝：共享基础设施，共享风险

For the crypto world, this isn't a direct hit on Bitcoin's blockchain, but it's a significant indirect threat. Many exchanges, wallet providers, and DeFi platforms rely on common web technologies, including PHP, for their public-facing interfaces. A compromised website could easily be manipulated to display fraudulent wallet connection prompts, fake login pages, or altered content, all designed to separate users from their digital assets. While visiting a PHP-powered site doesn't automatically compromise your device or crypto wallet, the risk lies in the potential for attackers to modify the site itself.

对于加密世界来说，这并不是对比特币区块链的直接打击，但它是一个重大的间接威胁。许多交易所、钱包提供商和 DeFi 平台都依赖常见的 Web 技术（包括 PHP）来实现面向公众的界面。受感染的网站很容易被操纵，显示欺诈性的钱包连接提示、虚假的登录页面或更改的内容，所有这些都是为了将​​用户与其数字资产分开。虽然访问 PHP 驱动的网站不会自动损害您的设备或加密钱包，但风险在于攻击者可能会修改网站本身。

Government cybersecurity agencies from the EU to New Zealand have joined the chorus, urging organizations to identify and patch affected systems. The PHP Foundation itself admitted to a

从欧盟到新西兰的政府网络安全机构也加入了这一行列，敦促组织识别并修补受影响的系统。 PHP 基金会本身也承认