PHP vulnerability: Websites go offline amid critical security update
Developers of PHP, a backbone language for the internet , have warned that a security update might take millions of websites offline temporarily, sparking panic in the tech world. The PHP Foundation, which describes itself as a "structured governance model designed to ensure transparency, accountability, and effective stewardship" of the language, announced a security update in a social media…
Developers of PHP, a foundational programming language used by millions of websites worldwide, have issued a critical security update warning. Two vulnerabilities in PHP, rated CVSSv4 9.2, could potentially give hackers unfettered access to websites and their underlying file systems. The PHP Foundation announced the impending security release, urging users to prepare for temporary downtime as they implement the necessary patches.
Government websites across nations, including Japan's Prime Minister Sanae Takaichi and the Netherlands, Finland, France, and Australia, have temporarily taken systems offline to ensure smooth updating processes. The NSA also warned organizations using PHP to brace for the update, recommending temporary offline status if immediate patching is not possible.
OpenAI's researchers, leveraging its Patch the Planet initiative, discovered the vulnerabilities through artificial intelligence, highlighting the language's extensive adoption – an estimated 70% of websites globally rely on PHP. Security experts advise that if a website uses PHP without the update, it should be considered highly vulnerable, potentially already compromised by cybercriminals.
Written by urgent.news from The National Business's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
