AI tools are making it easier to identify and potentially exploit software vulnerabilities. Here is what the latest cybersecurity warning means for you and how to reduce your online risks.
The critical vulnerability lurks in PHP, a language that underpins sites like Wordpress. The fix is already available.
Security fixes are available for two critical PHP flaws, but businesses may have vulnerable copies inside older software and equipment that need separate updates
software bugs to be precise. Humans are flawed in many ways — poor memory, incompetence, laziness, error of judgement and so on — so what we create often has flaws. For example, the writing in...
A CTO shares what it was like to go 48 hours without sleep as he dealt with the PHP security flaw — and why he expects more AI cyber crises.
Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take...
Artificial intelligence has found critical security flaws in a major programming language called PHP, with many websites taken offline Thursday as organizations worldwide scramble to fend off...
Two critical flaws in PHP, a language used to run websites, could let attackers execute malicious code without logging in
Much of the world woke Wednesday to news that PHP, a coding language most people have never heard of but that underlies roughly 70% of all websites, had a hackable vulnerability, sending...
PALO ALTO, California/NEW YORK -- The revelation of security flaws in the PHP programming language spurred hundreds of Japanese websites to go offline for maintenance, but their American...
According to Wiz, the vulnerabilities affect PHP releases dating back to version 5.4.
Organisations unable to update affected systems immediately should consider taking them offline until they can be secured, the NSA said.
Two vulnerabilities in the widely used web programming language could allow attackers to run malicious code remotely without logging in. Several government websites across the world went dark...
There were few, if any, reports of widespread damage by hackers exploiting PHP flaws, experts said, one day after officials warned of severe vulnerabilities.
These flaws rank among the 'most severe vulnerabilities' arguably discovered in software history, Wiz said.
If an immediate update is not feasible, the FBI strongly recommends taking the affected system offline until full mitigation can be achieved. Organizations must inventory where PHP operates within...
Government security agencies warn companies to take immediate action after AI uncovers widespread vulnerabilities
Governments, other organisations take websites offline after researchers publish fix for critical PHP flaw affecting 70 percent of internet
Websites were taken offline after the developers of programming language PHP said "critical vulnerabilities" had been discovered.
The rush came after government websites in Europe and elsewhere went offline on Wednesday, with the disclosure of the flaws sending website operators scrambling to protect their systems
The PHP project moved its security release forward after an accidental proof-of-concept leak exposed critical vulnerabilities that went unfixed for years due to organizational failures.
PHP has raised alarms over two critical vulnerabilities that risk enabling hackers to execute malicious code. To minimize exposure, users are advised to turn off a certain file-upload tracking...
Critical PHP vulnerabilities have triggered a global cybersecurity scramble, forcing governments, banks and airlines to temporarily suspend online services as hacking attempts surge. With AI...
Two critical security flaws in PHP, the programming language underpinning an estimated 70% of the internet, have triggered emergency cybersecurity measures in India. Banks are auditing...
Critical PHP security flaws trigger global warnings as Google, OpenAI and Amazon respond to potential cyber threats.
The impact of critical PHP vulnerabilities has been felt worldwide
Businesses are facing a shrinking window to secure their systems after software vulnerabilities become public, as attackers increasingly move from technical disclosures to working exploits within...
A rush to update websites and protect against vulnerabilities in a widely used programming language continued into its second day, with researchers warning that hackers have attempted to exploit...
Japanese companies from banks to airlines took down digital services to shield themselves from flaws in internet software, one of the starkest examples of the chaos wrought by the discovery of...
Google Cloud is not affected, but customers running PHP applications on the platform may be vulnerable.
Organisations are scrambling to curtail risks from flaws in the PHP programming language.
In Japan, SoftBank said it was suspending its emergency mobile alert system for maintenance to address a PHP vulnerability.
Governments around the world are rushing to implement safety measures after AI technology found "severe" vulnerabilities in a key programming language called PHP.(Image credit: Yong Teck Lim)
AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.
The language that’s known as the backbone of the internet is now subject to what experts are calling one of the most notable vulnerabilities in recent memory.
After AI found critical PHP flaws, OpenAI proposed a five-stage disclosure plan as Finland and others pulled sites offline.
The language that’s known as the backbone of the internet is now subject to what experts are calling the one of the most notable vulnerabilities in recent memory
Researchers have disclosed two serious security vulnerabilities in a programming language that powers much of the internet, known as PHP. A race is now on to patch up the flaws in millions of...
The PHP crisis is just the most prominent in a spate of major cyber incidents in which AI has either found vulnerabilities or been used to exploit them.
AI tools helped researchers uncover serious weaknesses in PHP, raising fresh questions about how artificial intelligence could transform both cyber-security and hacking
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560,...
PHP vulnerabilities: US National Security Agency issues urgent warning over PHP2Shell exploit affecting web servers globally. Companies face server takeover risks as malicious actors target...
Website hosts need updated PHP software to fix two memory flaws that can let attackers run server code without logging in.
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two AI-found flaws that let attackers run code on web servers without logging in. Update now.
The NSA (National Security Agency/Central Security Service) just dropped an urgent cybersecurity warning- so in case someone is running PHP, the vulnerabilities, known as ‘PHP2Shell’, could let...
Critical PHP2Shell flaws could enable remote code execution and memory leaks, prompting security patches and industry-wide action.
The issue, known as PHP2Shell, led to emergency patches for two vulnerabilities that could enable remote code execution.
Two critical PHP vulnerabilities could allow attackers to compromise web servers without authentication, prompting emergency security updates and warnings from cybersecurity authorities, including...
The PHP2Shell vulnerabilities could allow hackers to execute code remotely without authentication, prompting cybersecurity agencies to urge organisations to patch affected systems or take them...
‘PHP2Shell’ remote code execution vulnerability patched, but organizations need to identify vulnerable systems and update to the latest PHP version, agencies warn
CERT-In has rated two new PHP flaws critical as government sites and parts of Wikipedia go offline worldwide. Here is what PHP2Shell is and what it means for you.
Updated on Thursday, Oct. 22 at 12:25 p.m. ET — The PHP security issues known as PHP2Shell sent the cybersecurity world into a frenzy yesterday, and now we have some data on the...
Two critical vulnerabilities in one of the web’s most widely used programming languages have put server security under scrutiny
A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.
Servers that use the popular PHP programming language were exposed to a critical security bug. Millions of websites have their data at risk.
Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.
Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain...
Why are websites going offline around the world? Find out what happened and how users can stay safe.
Many government sites appeared to be functioning normally Thursday, but outages or limited service continued while security work was under way.
Governments and corporations worked throughout the night to update software after the AI-assisted discovery of vulnerabilities in a programming language vital to about 70% of websites globally
Governments and companies around the world are racing to fix vulnerabilities revealed by artificial intelligence that could affect 70% of the world’s websites.
A report from a cybersecurity firm estimated that the software flaw had existed undetected for more than a decade, but AI tools helped quickly identify a fix for them.
PHP sits underneath popular web design platforms, so the weaknesses potentially affect a vast range of websites
Two severe vulnerabilities in the PHP programming language have led to significant website shutdowns globally. These flaws potentially allow attackers to compromise web servers without needing a...
New Delhi: Government websites in the Netherlands, France, Finland, Denmark and Canada were taken offline Wednesday as their operators moved to fix two security flaws in PHP, a programming...
Emergency shutdowns across several European countries followed the disclosure of critical vulnerabilities in PHP, a programming language used by much of the web.
First reported:
First saved on ClustZ:
Coverage updated:
We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.