{
  "id": 16782064,
  "title": "Last Week’s Critical PHP Warning Was the Tip of the Web Vulnerability Iceberg",
  "url": "https://urgent.news/2026/10/27/last-weeks-critical-php-warning-was-the-tip-of-the-web-vulnerability",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T18:39:30.000Z",
  "source": {
    "name": "CNET",
    "slug": "cnet",
    "url": "https://www.cnet.com/tech/services-and-software/php-warning-web-vulnerability/"
  },
  "original_language": "en",
  "account": "Last week, software engineers worldwide scrambled to update website backends following the discovery of two major vulnerabilities in PHP, a crucial piece of web software used by up to 70% of global websites. PHP, being open-source, can become outdated if website owners fail to update to newer versions, making them susceptible to attacks. Alert issuers urged site operators to update, but many government websites went offline in Europe as updates were applied. It now falls to individual website owners to implement the fixes, as no law mandates this. With no resources to keep the web safe, the web's architecture has become insecure due to neglect and dwindling resources. The PHP Foundation, tasked with ensuring security flaws in PHP are addressed, is underfunded, with only one full-time staff member and 14 part-time contractors, who work on a volunteer basis. Despite the increasing demand to address AI-generated threats, the number of contributors hasn't doubled. Small business owners may not address the PHP issue because they are unaware of its impact on their websites. A survey by Network Solutions found that 45% of small business owners had never heard of PHP, and 71% weren't sure if their sites use it. Many of these site owners hadn't heard about the recent PHP flaws. While large tech companies like Cloudflare and GoDaddy have taken steps to protect their users, website owners still need to update PHP to protect their visitors.",
  "summary": "AI is finding new holes in the infrastructure of the internet. Is anyone around to patch them?",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}