logo
About Contact

Urgent Action Required: PHP Issues Emergency Patches for Critical Vulnerabilities Affecting Millions of Websites

Technology News

Urgent Action Required: PHP Issues Emergency Patches for Critical Vulnerabilities Affecting Millions of Websites

PHP has critical vulnerabilities impacting millions of websites, emergency patch imminent

Neowin

PHP has critical vulnerabilities impacting millions of websites, emergency patch imminent

Website owners are bracing for an urgent security update after a serious warning, with the PHP team preparing an emergency response, as the vulnerabilities impact around 70% of the web.

Two Critical PHP Vulnerabilities Could Put Websites at Risk. Here's How to Prepare

techloy.com

Two Critical PHP Vulnerabilities Could Put Websites at Risk. Here's How to Prepare

The PHP security team says it has scheduled patches for Wednesday, October 21, at 14:00 UTC.

PHP rushes out emergency patches for two critical bugs AI found first

TNW

PHP rushes out emergency patches for two critical bugs AI found first

PHP shipped emergency security updates on Wednesday. They fix two critical flaws that let an unauthenticated attacker run code on almost any server running the language. The release capped a...

2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now

Inc.

2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now

The PHP Security Team has released updates that every website owner should know about.

PHP warns it plans to release 2 emergency patches imminently

Ars Technica

PHP warns it plans to release 2 emergency patches imminently

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that...

Fixes issued for critical PHP vulnerabilities

ITPro

Fixes issued for critical PHP vulnerabilities

The two PHP vulnerabilities carry a CVSS score of 9.2

Critical PHP Security Flaws Leak, Triggering Emergency Patch Warning for Millions of Website — Apply Emergency Patch Today

Tech Startups

Critical PHP Security Flaws Leak, Triggering Emergency Patch Warning for Millions of Website — Apply Emergency Patch Today

Millions of websites could face serious security risks after details of two critical PHP vulnerabilities leaked ahead of their planned disclosure, prompting an emergency patch announcement and...

Critical PHP vulnerabilities: POC released, attacks starting

The Stack

Critical PHP vulnerabilities: POC released, attacks starting

Gear up to patch sharply today

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

The Register

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

Websites down as precaution as exploits have already been published

PHP knew about one of the flaws in 2024 but could not agree a fix

TNW

PHP knew about one of the flaws in 2024 but could not agree a fix

The PHP Foundation has given an unusually frank account of the emergency behind this week’s patches. It said it had found one of the two critical flaws two years ago, in 2024. Then it spent months...

Critical PHP Vulnerabilities Spark Global Cybersecurity Alarm, Prompting Urgent Fixes

Two Critical PHP Vulnerabilities Threaten Millions Of Websites Worldwide, EU Warns Of Potential Shutdowns As Cyberattacks Begin

Wccftech

Two Critical PHP Vulnerabilities Threaten Millions Of Websites Worldwide, EU Warns Of Potential Shutdowns As Cyberattacks Begin

Two critical security vulnerabilities have been discovered in PHP, one of the world's most widely used server-side programming languages, prompting urgent warnings from cybersecurity authorities...

PHP warns of major security flaws, announces emergency release to fix it

India Today

PHP warns of major security flaws, announces emergency release to fix it

The internet may soon witness a spree of cyberattacks. PHP, a programming language that powers a large part of the internet, has two critical vulnerabilities. To address these major flaws, the PHP...

Critical vulnerabilities in commonly used web code spark rush to update systems

NBC News

Critical vulnerabilities in commonly used web code spark rush to update systems

Crucial vulnerabilities in the PHP language is so severe that global authorities have recommended websites temporarily go offline until it can be fixed.

Cyber agency warns websites may go dark as PHP prepares critical fix

The Hindu

Cyber agency warns websites may go dark as PHP prepares critical fix

PHP is ‌used across large parts of the internet, and speculation has circulated over the past day that websites running the software could be exposed to serious ‌cyber intrusions

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Decrypt

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch is out, attacks started early, and governments pulled the plug.

Some websites may go down as huge internet vulnerabilities found, cyber agency warns

Independent

Some websites may go down as huge internet vulnerabilities found, cyber agency warns

PHP underpins expansive sections of the internet

Websites taken down worldwide as critical cyber-security update issued

BBC

Websites taken down worldwide as critical cyber-security update issued

The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.

This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says

PCMag

This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says

Two severe vulnerabilities in PHP can lead to unauthenticated remote code execution, enabling hackers to tamper with websites and servers that use the scripting language.

New PHP vulnerability means the Internet will have a very rough couple of days

AppleInsider

New PHP vulnerability means the Internet will have a very rough couple of days

A severe vulnerability has been found in key web technology PHP, forcing just about everybody to patch websites, and fast. Expect outages.Websites may go down for a few days because of a nasty PHP...

Website admins across the world bracing for impact following major PHP flaw reveal

TechRadar

Website admins across the world bracing for impact following major PHP flaw reveal

PHP, arguably the most popular programming language for websites and web applications in the world, contains two critical-level vulnerabilities that could expose countless sites to remote code...

Governments Act Swiftly to Take Websites Offline Amid PHP Security Threats

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

The Record

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

The maintainers of the globally used PHP scripting language released patches for two vulnerabilities after alerting users that the bugs were severe.

PHP security flaws force government websites offline as agencies scramble to protect systems

Firstpost

PHP security flaws force government websites offline as agencies scramble to protect systems

Critical vulnerabilities in PHP have prompted government agencies and cybersecurity authorities across several countries to take precautionary measures, as website operators rush to patch...

European governments pull websites offline over two critical PHP flaws

TNW

European governments pull websites offline over two critical PHP flaws

Government, hospital and university websites across Europe went dark on Wednesday. Operators pulled them offline to guard against two critical flaws in PHP, the programming language that runs a...

Governments Take Websites Offline After PHP Security Warnings

Bloomberg

Governments Take Websites Offline After PHP Security Warnings

Governments in Europe are taking websites offline in response to warnings about critical security vulnerabilities in a programming language that underpins the internet.

PHP Rushes to Patch Two Critical RCE Vulnerabilities Amid Rising Exploits

Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

CyberScoop

Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

The Hacker News

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36...

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official...

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

The Hacker News

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that...

Coverage dates

First reported:

First saved on ClustZ:

Coverage updated:

We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.