A Dutch web developer has created a rootkit that hides inside a PHP module and can be used to take over web servers via a rarely used attack vector: Apache modules.

Nginx Plus R9, debuting today, uses the new Dynamic Modules feature to work with more than 100 modules for capabilities like Web security, authentication, and integrating third-party languages ...