Websites taken down worldwide as critical cyber-security update issued
International governments and agencies have urged websites to address two critical cyber-security flaws in a programming language which powers much of the internet. The vulnerabilities were found within the PHP programming language, with a fix issued on Wednesday afternoon. Multiple cyber-security agencies have urged organisations unable to apply fixes in time to consider taking their […]
Critical cyber-security flaws in the PHP programming language, which powers a significant portion of the internet, have led to multiple websites being taken down worldwide. These vulnerabilities, discovered by AI researchers at firms Calif and Wiz, were deemed the "most severe vulnerabilities ever discovered" by the tech industry.
The flaws had been undetected for over a decade, despite the PHP Foundation intending to release its discovery with a complete fix. However, details of the flaw were leaked on social media, forcing PHP Foundation to act quickly. Multiple cyber-security agencies, including the US National Security Agency, the Finnish government, and the EU, have advised organizations unable to apply fixes to consider taking their sites offline.
The vulnerabilities allow hackers to gain remote code execution, potentially installing malware and taking down websites. While it is estimated that roughly 70% of the internet is affected, affected versions of PHP range from PHP 5 onwards. Organizations using PHP are urged to apply the fixes as soon as possible and continuously monitor for security updates.
Written by urgent.news from The Island Sri Lanka's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
