The New York State Department of Financial Services issued an alert warning about two critical PHP vulnerabilities currently being exploited in the wild. The regulator urged all regulated entities to promptly identify and remediate the flaws to mitigate potential security risks. The alert underscores the urgency for financial institutions under NYDFS oversight to patch vulnerable systems before attackers can leverage the exploits.