{
  "id": 16027286,
  "title": "Cybersecurity: The most important questions and answers about the PHP security vulnerability",
  "url": "https://urgent.news/2026/10/22/cybersicherheit-die-wichtigsten-fragen-und-antworten-zur-php",
  "topic": "business",
  "section": "Business",
  "published": "2026-10-22T10:06:30.000Z",
  "source": {
    "name": "Handelsblatt",
    "slug": "handelsblatt",
    "url": "https://www.handelsblatt.com/unternehmen/dienstleister/sicherheitsluecke-wie-gross-ist-die-php-bedrohung-und-was-hat-ki-damit-zu-tun/100264121.html"
  },
  "original_language": "de",
  "account": "A security vulnerability in the PHP programming language has caused widespread disruptions to websites globally. The vulnerability, known as \"PHP2Shell\", allows attackers to execute malicious code on servers without authentication, and has prompted authorities in several German states, universities, and hospitals, including Berlin's Charité, to take their websites offline as a precaution. Similar shutdowns have occurred in the Netherlands, France, Belgium, and Australia, with the German Federal Office for Information Security (BSI) raising its warning level to \"3 / Orange\". The vulnerability affects all PHP versions since at least version 5.4, and an estimated 70% of websites, including those using popular applications like WordPress.",
  "summary": "Since yesterday, authorities, clinics and universities have been shutting down their websites. The reason is a serious security vulnerability. Who needs to take action, and what role does AI play? What you need to know.",
  "key_points": [
    "PHP2Shell vulnerability affects thousands of websites globally",
    "German, Dutch, French, Belgian, and Australian authorities disable internal web apps",
    "PHP is widely used in web content generation for platforms like WordPress"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}