Two critical PHP flaws trigger global alert; millions of services face cyber risk

A global scramble has erupted following critical vulnerabilities discovered in PHP, a widely used open-source scripting language. The Indian Computer Emergency Response Team (CERT-In) has issued a critical-severity warning over two flaws that could allow unauthenticated attackers to execute malicious code remotely and compromise affected systems.

Microsoft CEO Satya Nadella described the scale of the incident as unusual, noting it was something he had not seen in a long time. Google Cloud executives have disclosed the vulnerabilities, which were identified using multiple AI models. Google Cloud itself stated that its infrastructure was not vulnerable but warned customers running PHP applications on the platform to update their applications to patched PHP versions and redeploy them.

The response has extended beyond India, with companies and government agencies in several countries temporarily restricting access to some online services as a precaution while they work to secure vulnerable systems.

Brief written by urgent.news from Times of India's own syndicated text. Machine-written — may contain errors; check the original before relying on it.