The New Threats Are on the Server

The really innovative cracking is happening on Web servers these days, and defensive research is moving in that direction too. There is another type of dangerous botnet out there where you might not expect it: in Web servers and hosting farms, typically Linux boxes. The Web server software on these servers typically runs PHP, the wildly popular Web scripting language.

If you follow vulnerability tracking, you've seen the name PHP a lot over the last couple of years. The number of vulnerabilities in it has been large, and the problem is long-standing

Read more HERE.