PHP official code base migrated to GitHub. As a precaution following this incident, PHP maintainers have decided to migrate the official PHP source code repository to GitHub.

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide.

PHP.net hacked, code backdoored. The commits were made to the php-src repo under the account names of two well-known PHP developers, Rasmus Lerdorf and Nikita Popov.