Enterprise
PHP shares mitigation for new RCE vulnerability with no patch
PHP security team disclosed a remote code execution vulnerability affecting non-default configurations with no available patch yet.
Topic
#Php
Stories tagged by our AI curator.
Enterprise
PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
The PHP Project has released mitigation steps for RCE exploits in PHP, offering interim protection for users who haven't yet applied patches.
Enterprise
PHP2Shell was only the beginning: AI is accelerating the patch race
A PHP vulnerability (PHP2Shell) caused widespread outages across European government websites, highlighting how AI-accelerated vulnerability discovery is outpacing patch deployment in the open-source ecosystem.
Enterprise
Cloudflare sees millions of attempts to exploit critical PHP flaws
Cloudflare has detected millions of exploitation attempts targeting two critical PHP vulnerabilities since public disclosure.
Also covered by 1 other outlet
Enterprise
PHP security flaw: India activates emergency response; takes apps offline amid a global alert
India activated emergency cybersecurity measures after critical PHP flaws affecting 70% of internet applications were discovered, prompting banks to audit systems and patch government websites.
Enterprise
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon warned that hackers exploited a critical PHP vulnerability four days before public disclosure, with broad exploitation now underway across systems worldwide.
Enterprise
PHP: The three little letters wreaking havoc across the web
Two critical vulnerabilities in PHP, which powers about 70% of websites, have exposed millions of sites to attacks and forced offline some high-profile platforms including the Internet Archive and DeviantArt.
Enterprise
AI found a critical PHP flaw. The bigger failure began in 2024.
Two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) prompted widespread outages, but broader concerns center on the handling of coordinated disclosure and pressure on open-source maintainers as AI accelerates exploit discovery.
Enterprise
Websites across world hit by millions of attempts to exploit PHP code flaw
A critical vulnerability in PHP, which underpins 70% of websites, has triggered millions of exploitation attempts globally and prompted government and company websites to go offline for patching.
Enterprise
What’s going on with the web? The PHP issue and sites going offline
Multiple websites have gone offline following the discovery of critical security vulnerabilities in PHP, a protocol used by most websites.
Enterprise
Internet on Alert as AI Uncovers Critical Flaws in PHP Used by 70% of Websites
AI models discovered critical vulnerabilities in PHP affecting 70% of websites, with a 9.2 severity score. Multiple security breaches including an SBI data leak also emerged in October.
Enterprise
Explained: What is PHP? Why govt websites went dark? International advisory issued as AI exposes serious cyber glitch
A PHP vulnerability discovered through AI has triggered international cybersecurity advisories and caused government websites to go offline globally, highlighting how advanced AI can expose software flaws previously missed by human analysis.
Enterprise
PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers
PHP released emergency security fixes after major websites reported being targeted by hackers, addressing critical vulnerabilities in the widely-used server-side scripting language.
Enterprise
How computer language flaws found using AI could impact 70% websites; CERT-In issues critical alert
Critical PHP security flaws affecting 70% of websites prompted government shutdowns across multiple countries; CERT-In issued an alert.
Enterprise
Flaw in PHP computer language leads to shutdown of websites around world
A critical vulnerability discovered in PHP, the language used by nearly 70% of websites, prompted governments in Belgium, Netherlands, Finland, France and Germany to temporarily take down websites for patching.
Enterprise
The internet is having a very bad cybersecurity day
Multiple security vulnerabilities surfaced this week, including AI-discovered PHP flaws, Node.js issues, and problems in the LiteLLM AI tool, creating urgent concerns for cybersecurity teams.
Enterprise
Explained: What is PHP and why did it take government websites offline?
PHP developers released patches for critical vulnerabilities; EU officials warned organizations to take vulnerable websites offline if patches cannot be applied immediately.
Enterprise
PHP knew about one of the flaws in 2024 but could not agree a fix
The PHP Foundation disclosed that it discovered one of two critical flaws in 2024 but took months to agree on a fix before this week's patches.