logo
About Contact

PHP Faces Major Security Crisis: Millions of Websites at Risk from Critical Vulnerabilities

AI News

PHP Faces Major Security Crisis: Millions of Websites at Risk from Critical Vulnerabilities

What is PHP and why is it facing a security crisis | Explained

The Hindu

What is PHP and why is it facing a security crisis | Explained

Two critical vulnerabilities in one of the web’s most widely used programming languages have put server security under scrutiny

What is PHP and why has it caused chaos for millions of websites?

Independent

What is PHP and why has it caused chaos for millions of websites?

Security researchers say it is one of the most severe vulnerabilities ever discovered ‘in software history’

What is PHP and what is wrong with it? Full cybersecurity fiasco explained in 5 points

India Today

What is PHP and what is wrong with it? Full cybersecurity fiasco explained in 5 points

A security problem in PHP, one of the most widely used programming languages for building websites, has triggered an urgent response from businesses and government agencies around the world. Some...

Two Critical PHP Vulnerabilities Threaten Millions Of Websites Worldwide, EU Warns Of Potential Shutdowns As Cyberattacks Begin

Wccftech

Two Critical PHP Vulnerabilities Threaten Millions Of Websites Worldwide, EU Warns Of Potential Shutdowns As Cyberattacks Begin

Two critical security vulnerabilities have been discovered in PHP, one of the world's most widely used server-side programming languages, prompting urgent warnings from cybersecurity authorities...

PHP vulnerability: Which websites and services are affected?

Mashable

PHP vulnerability: Which websites and services are affected?

If some of your usual websites aren’t working today, their operators may have temporarily shut them down to keep hackers out.Two serious security flaws have been discovered in PHP, a programming...

AI Reveals Critical PHP Vulnerabilities, Prompting Global Cybersecurity Alert and Website Shutdowns

Websites go dark as AI exposes critical security flaws

The Hindu

Websites go dark as AI exposes critical security flaws

PHP sits underneath popular web design platforms, so the weaknesses potentially affect a vast range of websites

Internet on Alert as AI Uncovers Critical Flaws in PHP Used by 70% of Websites

AIM

Internet on Alert as AI Uncovers Critical Flaws in PHP Used by 70% of Websites

According to Wiz, the vulnerabilities affect PHP releases dating back to version 5.4.

ET CISO

Websites go dark worldwide as AI exposes critical security flaws

Two severe vulnerabilities in the PHP programming language have led to significant website shutdowns globally. These flaws potentially allow attackers to compromise web servers without needing a...

EXPLAINER - What are the critical PHP flaws uncovered by AI, and why do they matter?

Anadolu Ajansı

EXPLAINER - What are the critical PHP flaws uncovered by AI, and why do they matter?

Two critical flaws in PHP, a language used to run websites, could let attackers execute malicious code without logging in

AI helps uncover critical PHP flaws threatening 70pc of internet

Silicon Republic

AI helps uncover critical PHP flaws threatening 70pc of internet

These flaws rank among the 'most severe vulnerabilities' arguably discovered in software history, Wiz said.

What is PHP and why did it spark a global cyber-security scramble?

BBC

What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

AI uncovers decade-old vulnerabilities, leaving website operators scrambling

CTech

AI uncovers decade-old vulnerabilities, leaving website operators scrambling

Emergency shutdowns across several European countries followed the disclosure of critical vulnerabilities in PHP, a programming language used by much of the web.

The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in

Fortune

The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in

The PHP crisis is just the most prominent in a spate of major cyber incidents in which AI has either found vulnerabilities or been used to exploit them.

What to Know About the AI-Triggered Cybersecurity Crisis

The Wall Street Journal

What to Know About the AI-Triggered Cybersecurity Crisis

PHP, a technology that powers up to 70% of the world’s websites, is under threat. Here’s how the tech world is racing to fix it.

Critical PHP security flaw left websites exposed to cyberattacks: How it was uncovered and fixed

Firstpost

Critical PHP security flaw left websites exposed to cyberattacks: How it was uncovered and fixed

A critical PHP vulnerability discovered with the help of AI has triggered a scramble to secure websites, as experts warn that increasingly capable AI tools could make complex cyberattacks easier...

Websites taken down worldwide as critical cyber-security update issued

BBC

Websites taken down worldwide as critical cyber-security update issued

The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.

Global Websites Go Dark Amid Urgent PHP Security Flaw Fixes and Hacking Surge

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

The New York Times

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

PHP vulnerabilities spark global scramble as websites taken down

ITPro

PHP vulnerabilities spark global scramble as websites taken down

The impact of critical PHP vulnerabilities has been felt worldwide

Hacking attempts surge as companies, governments rush to patch PHP flaws

Reuters

Hacking attempts surge as companies, governments rush to patch PHP flaws

Global firms and governments rushed ​to patch critical flaws in the PHP programming language that underpins much of the internet, as a cloud firm reported millions of hacking attempts after...

What Is PHP? A Software Flaw Has Forced Websites Around The World To Shut Down

NEWS18

What Is PHP? A Software Flaw Has Forced Websites Around The World To Shut Down

Why are websites going offline around the world? Find out what happened and how users can stay safe.

Silicon UK

Sites Go Dark As Admins Rush To Patch PHP Flaw

Governments, other organisations take websites offline after researchers publish fix for critical PHP flaw affecting 70 percent of internet

PHP crisis: Websites across the internet go down as hackers launch millions of cyber attacks

Independent

PHP crisis: Websites across the internet go down as hackers launch millions of cyber attacks

Government, banking and other key websites taken offline to respond to panic over technology that powers much of the internet

Asian governments step up cyber defences after PHP flaw

MoneyControl

Asian governments step up cyber defences after PHP flaw

The rush came after government websites in Europe and elsewhere went offline on Wednesday, with the disclosure of the flaws sending website operators scrambling to protect their systems

Japan Scrambles to Patch PHP Flaws as Banks, Airlines Go Offline

Bloomberg

Japan Scrambles to Patch PHP Flaws as Banks, Airlines Go Offline

Japanese companies from banks to airlines took down digital services to shield themselves from flaws in internet software, one of the starkest examples of the chaos wrought by the discovery of...

AI-detected PHP security flaws disrupt websites, spark warnings across Asia

Nikkei Asia

AI-detected PHP security flaws disrupt websites, spark warnings across Asia

TOKYO/CANBERRA -- Major Japanese companies from Sega to All Nippon Airways and MUFG Bank suspended websites and parts of their online services by Thursday, as authorities across Asia called for...

How the security community found the PHP flaws but stumbled across the finish line

The Stack

How the security community found the PHP flaws but stumbled across the finish line

Everything, everywhere, all at once.

Governments Offline: The PHP Security Flaw Behind the Global Cyber Threat

What is the PHP security vulnerability: The AI-found bug that made governments take websites offline

Economic Times

What is the PHP security vulnerability: The AI-found bug that made governments take websites offline

ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline

Economic Times

ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline

Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain...

Why governments pulled websites offline over a decades-old programming language

CNBC

Why governments pulled websites offline over a decades-old programming language

Servers that use the popular PHP programming language were exposed to a critical security bug. Millions of websites have their data at risk.

UK government services offline after global PHP cybersecurity threat

Independent

UK government services offline after global PHP cybersecurity threat

Cybersecurity chiefs warned UK organisations that a ‘critical security issue’ had been discovered in the programming language PHP

What is PHP? Software security vulnerability explained – and why cybersecurity issue brought down so many websites

The Sun

What is PHP? Software security vulnerability explained – and why cybersecurity issue brought down so many websites

COUNCILS, government bodies, and well-known websites have been forced offline following an alert over a security flaw in one of the internet’s most vital building blocks. The disruption centres on...

Explained: What is PHP? Why govt websites went dark? FBI advisory issued

Mint

Explained: What is PHP? Why govt websites went dark? FBI advisory issued

PHP has triggered international advisories and forced websites offline worldwide, marking a new phase in cybersecurity in which increasingly powerful AI can uncover software vulnerabilities that...

No breach of Budget security after critical flaw found in PHP, minister says

Independent

No breach of Budget security after critical flaw found in PHP, minister says

It comes after cyber security chiefs warned UK organisations that a ‘critical security issue’ had been discovered in programming language PHP.

PHP security flaws force government websites offline as agencies scramble to protect systems

Firstpost

PHP security flaws force government websites offline as agencies scramble to protect systems

Critical vulnerabilities in PHP have prompted government agencies and cybersecurity authorities across several countries to take precautionary measures, as website operators rush to patch...

Explained: What is PHP and why did it take government websites offline?

Economic Times

Explained: What is PHP and why did it take government websites offline?

The developers of PHP said on Wednesday they would release patches for two critical vulnerabilities, and EU cybersecurity officials warned organisations unable to apply the fixes to take affected...

AI Discovers Critical Vulnerabilities in PHP, Exposing Millions of Websites to Security Risks

How AI Unearthed PHP Software Flaws That Put Millions of Websites at Risk

Bloomberg

How AI Unearthed PHP Software Flaws That Put Millions of Websites at Risk

Researchers have disclosed two serious security vulnerabilities in a programming language that powers much of the internet, known as PHP. A race is now on to patch up the flaws in millions of...

Websites down: What is PHP and how has it raised AI hacking fears?

Tech Xplore

Websites down: What is PHP and how has it raised AI hacking fears?

Artificial intelligence has found critical security flaws in a major programming language called PHP, with many websites taken offline Thursday as organizations worldwide scramble to fend off...

Why a flaw in PHP has put the internet's underlying code under scrutiny

Business Standard

Why a flaw in PHP has put the internet's underlying code under scrutiny

AI tools helped researchers uncover serious weaknesses in PHP, raising fresh questions about how artificial intelligence could transform both cyber-security and hacking

Millions of websites at risk? OpenAI finds critical security flaws in PHP, here is all you need to know

Digit

Millions of websites at risk? OpenAI finds critical security flaws in PHP, here is all you need to know

Millions of websites could face security risks as OpenAI has discovered a critical vulnerability in PHP, a programming language widely used to run websites.

A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites

The New York Times

A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites

The disclosure heightened concerns about A.I.’s potential to upend cybersecurity unless shortcomings are addressed.

AI Finds Flaw in Popular Web Hosting Software, Sparking Global Race to Patch

The Information

AI Finds Flaw in Popular Web Hosting Software, Sparking Global Race to Patch

The creators of PHP, an open source programming language used by the majority of the world’s websites, on Wednesday urged web maintainers across the globe to install a new update after researchers...

A major security flaw found using ChatGPT is causing internet chaos

Business Insider

A major security flaw found using ChatGPT is causing internet chaos

The internet is ablaze after cybersecurity researches using an OpenAI model found a bug in PHP, a widely used programming language.

Critical PHP Vulnerabilities Threaten 70% of Websites, Urgent Updates Needed

A critical flaw affecting 70% of all websites has the cybersecurity world panicked

Tech Xplore

A critical flaw affecting 70% of all websites has the cybersecurity world panicked

Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take...

Explained: What are the two PHP vulnerabilities behind a global rush to update and why it matters

MediaNama

Explained: What are the two PHP vulnerabilities behind a global rush to update and why it matters

2 critical PHP vulnerabilities has led websites across the world to update as attackers can use it to run their own code on web server.

PHP2Shell Flaws Put Millions of Websites at Risk

Times of AI

PHP2Shell Flaws Put Millions of Websites at Risk

Critical PHP2Shell flaws could enable remote code execution and memory leaks, prompting security patches and industry-wide action.

Two critical PHP flaws put 70% of websites at risk of cyberattacks

Interesting Engineering

Two critical PHP flaws put 70% of websites at risk of cyberattacks

Two critical PHP vulnerabilities could let hackers execute malicious code on web servers, prompting emergency patches and urgent warnings.

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

WIRED

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Decrypt

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch is out, attacks started early, and governments pulled the plug.

2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now

Inc.

2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now

The PHP Security Team has released updates that every website owner should know about.

Why is everyone talking about PHP’s ‘critical’ security flaws?

PCWorld

Why is everyone talking about PHP’s ‘critical’ security flaws?

The silent backbone of many websites is under threat. Here's what you should know.

Critical PHP Security Flaws Leak, Triggering Emergency Patch Warning for Millions of Website — Apply Emergency Patch Today

Tech Startups

Critical PHP Security Flaws Leak, Triggering Emergency Patch Warning for Millions of Website — Apply Emergency Patch Today

Millions of websites could face serious security risks after details of two critical PHP vulnerabilities leaked ahead of their planned disclosure, prompting an emergency patch announcement and...

Hackers Exploit PHP Vulnerabilities Ahead of Official Patches

Researchers Say Hackers Targeted PHP Before Flaws Were Known

Bloomberg

Researchers Say Hackers Targeted PHP Before Flaws Were Known

A rush to update websites and protect against vulnerabilities in a widely used programming language continued into its second day, with researchers warning that hackers have attempted to exploit...

Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis

NBC News

Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis

There were few, if any, reports of widespread damage by hackers exploiting PHP flaws, experts said, one day after officials warned of severe vulnerabilities.

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

WIRED

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being "broadly exploited" across the internet.

Hackers Already Trying to Exploit Serious PHP Flaw

PCMag

Hackers Already Trying to Exploit Serious PHP Flaw

One exploitation attempt was sourced to an IP address based in China, says security provider VulnCheck. The flaw affects PHP, a scripting language used by an estimated 70% of websites.

PHP Issues Urgent Patches for Critical Vulnerabilities Amid Rising Security Threats

PHP rushed emergency patch after critical RCE flaws leaked online

Neowin

PHP rushed emergency patch after critical RCE flaws leaked online

The PHP project moved its security release forward after an accidental proof-of-concept leak exposed critical vulnerabilities that went unfixed for years due to organizational failures.

Google Cloud advises customers to patch PHP flaws

Tech in Asia

Google Cloud advises customers to patch PHP flaws

Google Cloud is not affected, but customers running PHP applications on the platform may be vulnerable.

PHP releases emergency fixes for 2 critical vulnerabilities

CyberScoop

PHP releases emergency fixes for 2 critical vulnerabilities

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.

Two Critical PHP Vulnerabilities Could Put Websites at Risk. Here's How to Prepare

techloy.com

Two Critical PHP Vulnerabilities Could Put Websites at Risk. Here's How to Prepare

The PHP security team says it has scheduled patches for Wednesday, October 21, at 14:00 UTC.

Fixes issued for critical PHP vulnerabilities

ITPro

Fixes issued for critical PHP vulnerabilities

The two PHP vulnerabilities carry a CVSS score of 9.2

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

The Register

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

Websites down as precaution as exploits have already been published

Critical PHP vulnerabilities: POC released, attacks starting

The Stack

Critical PHP vulnerabilities: POC released, attacks starting

Gear up to patch sharply today

PHP Patches Two Critical RCE Flaws Found with Frontier AI Models

Unite.AI

PHP Patches Two Critical RCE Flaws Found with Frontier AI Models

The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, security releases that fix two critical vulnerabilities that can allow unauthenticated remote code execution...

PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

The Record

PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened attention on both, why it...

Google Cloud issues urgent PHP patch guidance following critical vulnerabilities

Neowin

Google Cloud issues urgent PHP patch guidance following critical vulnerabilities

Google Cloud has issued urgent patch guidance for critical RCE vulnerabilities in PHP. If you run PHP on GCP, upgrade to version 8.2 or newer and redeploy your apps immediately to stay protected.

PHP warns it plans to release 2 emergency patches imminently

Ars Technica

PHP warns it plans to release 2 emergency patches imminently

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that...

Urgent PHP Vulnerability Threatens Government and Business Websites with Potential Shutdowns

What Is PHP? Why Are Government and Business Websites Going Offline?

The New York Times

What Is PHP? Why Are Government and Business Websites Going Offline?

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

PHP is cooked, US govt says patch now or shut down and go offline immediately

India Today

PHP is cooked, US govt says patch now or shut down and go offline immediately

The internet is cooked. PHP, the programming language that is behind a large portion of websites today, has two major cybersecurity flaws that could allow hackers to gain remote control of the...

Cyber agency warns websites may go dark as PHP prepares critical fix

The Hindu

Cyber agency warns websites may go dark as PHP prepares critical fix

PHP is ‌used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious ‌cyber intrusions

New PHP vulnerability means the Internet will have a very rough couple of days

AppleInsider

New PHP vulnerability means the Internet will have a very rough couple of days

A severe vulnerability has been found in key web technology PHP, forcing just about everybody to patch websites, and fast. Expect outages.Websites may go down for a few days because of a nasty PHP...

Major PHP Vulnerabilities Prompt Urgent Website Shutdowns and System Updates

Websites taken offline in race to patch PHP security flaw

Financial Times

Websites taken offline in race to patch PHP security flaw

Government security agencies warn companies to take immediate action after AI uncovers widespread vulnerabilities

Race to update services' computer systems after cyber-security flaw found

BBC

Race to update services' computer systems after cyber-security flaw found

Websites were taken offline after the developers of programming language PHP said "critical vulnerabilities" had been discovered.

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

The Record

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

The Register

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg

Urgent PHP Security Flaws Expose Millions: Updates Needed Now

Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix

AppleInsider

Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix

Attackers are actively exploiting critical PHP flaws to target internet-exposed NAS devices. If your files and backups are stored there, they're probably at risk.TerraMaster Network Attached...

PHP has critical vulnerabilities impacting millions of websites, emergency patch out

Neowin

PHP has critical vulnerabilities impacting millions of websites, emergency patch out

Website owners are bracing for an urgent security update after a serious warning, with the PHP team preparing an emergency response, as the vulnerabilities impact around 70% of the web.

PSA: Critical Security Flaw in PHP Exposes Millions of Website, Update Fast

TechPowerUp

PSA: Critical Security Flaw in PHP Exposes Millions of Website, Update Fast

For fellow infrastructure maintainers, today marks just the beginning of what could be a series of AI-driven security challenges. Two critical security flaws have been discovered in all variations...

PSA: PHP patches two critical flaws, server admins urged to update

TechSpot

PSA: PHP patches two critical flaws, server admins urged to update

PHP has released emergency security updates addressing two critical vulnerabilities that could allow attackers to remotely execute code without authentication. With PHP powering nearly 70% of all...

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.