TechnologyBreaking
PHP flaws flagged as powering 70% of websites
Livemint·
The PHP Foundation and FBI cyber division urged users Wednesday to patch two critical vulnerabilities or shut sites that could not update immediately. Experts said flaws might let attackers gain remote server control without passwords. PHP powers about 70% of websites globally, including WordPress, Drupal and Wikipedia's MediaWiki. UK, Finland and Japan government sites faced disruption during emergency fixes.
Prism
What It Means For You
- Unpatched PHP sites risk remote data theft or server use in further attacks.
- Some public services stayed offline while organisations tested available patches.
- AI tools helped researchers validate fixes after long delays finding practical exploits.
What's Happening
- Security advisories Wednesday warned of unauthenticated access on PHP-run sites.
- Governments took sites offline while applying patches this week.
- The foundation acknowledged structural delays after issues known since at least 2024.
Open source PHP reach
- PHP is free and open source, driving use in major content management systems.
- OpenAI said it led a coalition addressing PHP vulnerabilities over two months.
- Researchers warned scanning for weak systems may continue for weeks.
all-newstop-storiestrending-nowdaily-roundupeditors-picks
