Cybersecurity Alert: Critical PHP Vulnerabilities Prompt Widespread Patching Efforts Across Multiple Sectors

AI News

Cybersecurity Alert: Critical PHP Vulnerabilities Prompt Widespread Patching Efforts Across Multiple Sectors

After PHP, critical EDK2 flaw puts millions of servers at risk of hacking

10/28/2026

There seems to be no end to Black October in the world of cybersecurity. After finding severe flaws in PHP and eMudhra, there is now another critical vulnerability which may put millions of...

Tech in Asia

PHP’s AI-found flaws expose a bigger gap: Who guards AI agents?

10/28/2026

AI found PHP’s decade-old flaws in two days. But patching at that speed means letting AI act on its own, and nobody’s guarding what it can touch.

The Hacker News

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

10/27/2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited...

The Record

CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

10/27/2026

CISA added the widely publicized PHP vulnerabilities to the KEV, but didn't specify what kind of exploitation it was observing.

TechCrunch

US government says hackers are now exploiting critical PHP web bugs

10/27/2026

The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.

Economic Times

Cert-In and states rush to patch PHP flaws across govt portals

10/27/2026

Last week, two critical cybersecurity flaws in the PHP programming language were discovered with the help of AI. Subsequently, Cert-In issued advised organisations to apply security patches....

TechRadar

Microsoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect millions of sites

10/27/2026

Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell"...

Unite.AI

Dream Reports PHP2Shell Attack Chain That Compromised 25 Servers

10/27/2026

Dream has reported a PHP2Shell attack chain that it says compromised 25 servers, including systems in a U.S. government-affiliated environment. Its October 26 investigation describes an exposed...

Computer Weekly

PHP2Shell: US updates Kev catalogue as exploits spread

10/27/2026

After live exploitation of PHP2Shell was verified at the weekend, the US' Cisa cyber agency updates its vulnerability catalogue, urging organisations to prioritise their fixes.

ET CISO

Critical flaw affecting 70% of all websites has cybersecurity world panicked

10/26/2026

A major vulnerability in the PHP programming language has emerged, impacting numerous global websites. In response, governments and cybersecurity firms are strongly recommending urgent updates to...