Cybersecurity agency urges stronger defenses as AI exposes new vulnerabilities
Government agencies and major organizations in the US, UK, EU, Singapore and Japan have been treating PHP2Shell as a global cybersecurity emergency and have taken websites completely offline as a precaution while applying security fixes.
The National Cyber and Encryption Agency (BSSN) has issued a call for stronger cybersecurity defenses following the discovery of new vulnerabilities in the PHP programming language by artificial intelligence agents. Government agencies and major organizations in the US, UK, EU, Singapore, and Japan have declared PHP2Shell a global cybersecurity emergency, taking websites offline temporarily while implementing security fixes.
BSSN has outlined mitigation measures for two critical flaws, CVE-2026-109618 and CVE-2026-109619. The first flaw can cause memory corruption when PHP runs out of memory during website processing requests. The second flaw arises when PHP attempts to use a released piece of computer memory, potentially disrupting the program's operation.
Both vulnerabilities could enable remote attackers to execute malicious code on affected servers without authentication, compromising websites and the systems behind them.
Written by urgent.news from The Jakarta Post's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
