Security

PHP Vulnerability Triggers Global Website Shutdowns

The Guardian · 3 hours ago · Read the Full Story on The Guardian
PHP Vulnerability Triggers Global Website Shutdowns
AI SUMMARY

A critical vulnerability in the PHP programming language has forced governments and organizations worldwide to temporarily take millions of websites offline while emergency patches are applied.

  • A serious security vulnerability was discovered in the PHP programming language, which is used by nearly 70% of websites worldwide.
  • Governments in Belgium, the Netherlands, Finland, France, and Germany temporarily took websites offline to patch the PHP weakness.
  • National security agencies in Washington and London issued warnings about the flaw, noting it could provide a direct path to server file systems or databases.
  • Major platforms including WordPress, Wikipedia, and Slack utilize PHP, prompting the Wikimedia Foundation to take several systems offline as a precautionary measure.
  • The organisation behind PHP and cybersecurity companies released patches on Wednesday following the public disclosure of the bug.
  • Experts warned that automated exploitation and AI tools could drive a wave of cyber-attacks targeting unpatched servers over the coming weeks and months.
  • Amazon security detected an attempt to exploit the vulnerabilities against a decoy honeypot system on October 17, four days before public disclosure.