tech
Two critical PHP vulnerabilities prompt global website takedowns and urgent security update
Global website takedowns and urgent security updates are the result of two critical PHP vulnerabilities.
Key points
- Two critical vulnerabilities were found in the PHP programming language, with a fix issued on Wednesday afternoon.
- Cyber-security firm Wiz said the flaws were the most severe vulnerabilities ever discovered by AI.
- The US National Security Agency advised organisations to take systems offline if they could not update.
Why it matters. The flaws affect a language that powers much of the internet, and agencies warn that sites unable to apply the fix may need to go offline, potentially disrupting public services.
Two critical vulnerabilities in the PHP programming language have prompted global action. International governments and agencies, including the US National Security Agency and the White House, have advised websites to apply urgent security updates or temporarily take their sites offline. The flaws, discovered by AI, are considered severe and provide potential access to servers and databases.
Latest updates
Two critical PHP vulnerabilities prompt global website takedowns and urgent security update
Websites across the globe were taken down as governments and agencies scrambled to address two critical cybersecurity vulnerabilities found in PHP, a widely used programming language. The vulnerabilities were discovered by BBC technology reporters Tom Gerken, Laura Cress, and Joe Tidy, who reported on the urgent need for a security update. PHP powers a significant portion of the internet, making the flaws particularly dangerous if left unpatched. Authorities have issued emergency directives for organizations to apply the available fix immediately. The situation underscores the ongoing risks posed by foundational software components that underpin global digital infrastructure. Experts warn that delays in updating could expose systems to remote code execution attacks. The update was released within hours of the vulnerabilities being made public.
Critical PHP vulnerabilities prompt global website security alert
Two critical vulnerabilities have been identified in PHP, the widely used programming language that powers a significant portion of the internet. International governments and cybersecurity agencies have issued urgent advisories calling on website operators to apply a newly released fix. The flaws could potentially allow attackers to compromise or take down affected websites globally. Security researchers are urging immediate patching given the widespread use of PHP across web infrastructure.