New PHP vulnerability means the Internet will have a very rough couple of days
A severe vulnerability has been found in key web technology PHP, forcing just about everybody to patch websites, and fast. Expect outages. Websites may go down for a few days because of a nasty PHP vulnerability. Over the next couple of days, there will be more complaints about websites being down than usual. It's not just you, but the effects of the Internet relying on PHP and something going…
A critical flaw has been discovered in PHP, a widely-used web programming language, that threatens the stability of the Internet for the next few days. PHP, short for PHP: Hypertext Preprocessor, is a scripting language integral to website creation, and its vulnerability has led to potential website outages.
Developers behind PHP have announced they will release a patch on Wednesday to address two high-severity vulnerabilities, rated at 9.2 on the CVSSv4.0 scale. Users are strongly advised to upgrade immediately, as advised by Reuters. The severity of this issue is so significant that EU cybersecurity teams have warned companies and organizations unable to implement the patch may need to temporarily disable websites using PHP.
The European Computer Emergency Response Team (CERT-EU) has labeled the situation a risk of unauthenticated remote code execution, meaning attackers could insert and execute malicious code on vulnerable servers. Similarly, the Australian Cyber Security Centre (ACSC) has provided similar recommendations, urging identification of PHP servers, application of patches, and monitoring for suspicious activities.
While the ACSC has not confirmed any active exploitation of these vulnerabilities, Cloudflare CTO Dane Knecht has reported emerging attacks, prompting Cloudflare to implement temporary firewall rule changes.
PHP, known for its extensive use in various platforms like Drupal, Joomla, and Magento, as well as WordPress, an immensely popular blogging platform, is foundational to many aspects of the web. The vulnerability's impact is exacerbated by the use of artificial intelligence to identify and exploit these weaknesses, further complicating the situation. End users have limited options, aside from relying on web server administrators to apply the necessary patches.
In essence, this PHP vulnerability underscores the critical role of PHP in modern web infrastructure and the challenges posed by emerging AI-driven security threats. The best course of action for web users at this time is to remain patient, monitor developments, and hope for a swift resolution to the issue.
Written by urgent.news from AppleInsider's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
