PHP security issues: Websites go offline amid critical update
Developers of PHP, a backbone language for the internet , have warned that a security update might take millions of websites offline temporarily, sparking panic in the tech world. The PHP Foundation, which describes itself as a "structured governance model designed to ensure transparency, accountability, and effective stewardship" of the language, announced a security update in a social media…
PHP, a programming language fundamental to the internet, has issued a warning that a security update could cause millions of websites to go offline temporarily. The PHP Foundation, responsible for overseeing the language, announced the update to address two critical vulnerabilities that could be exploited by hackers. PHP, an HTML-embedded scripting language, is widely used for web applications due to its ease of use in building and maintaining websites.
Government websites worldwide have temporarily gone offline to prepare for the patch and reduce the risk of exploitation. World leaders, such as Japan's Prime Minister Sanae Takaichi, have urged everyone to take action. The PHP Foundation and OpenAI, creators of ChatGPT, discovered the vulnerabilities, praising AI's role in finding such critical security flaws. The vulnerabilities, known as "php2shell," allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests.
The US Cybersecurity and Infrastructure Security Agency (CISA) has strongly advised organizations to install the patch as soon as possible to prevent potential problems. If immediate patching is not feasible, organizations should consider taking their systems offline. Experts warn that if exploitation is identified, it may indicate a more severe compromise.
Written by urgent.news from The National UAE's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
