Global organizations have taken websites offline after researchers discovered severe security vulnerabilities in the widely used PHP programming language.
International agencies and governments recently urged website owners to fix critical security flaws. These vulnerabilities exist within the PHP programming language. This language supports a large portion of the internet.
Next, developers released a security patch on Wednesday afternoon. Many organizations could not apply this fix immediately. As a result, they took their websites offline to protect their data.
Meanwhile, government bodies like the Finnish government and the Dutch cyber-security agency shut down public services. The US National Security Agency advised organizations to disconnect systems if they could not update them.
Also, the flaws allow attackers to access server files or databases directly. Experts discovered these issues using advanced artificial intelligence tools. A security firm called Wiz labeled these the most severe vulnerabilities found by AI.
After that, the White House confirmed that federal agencies are working with AI labs to speed up solutions. Japan’s government also warned people to check if their websites rely on PHP. The Wikimedia Foundation is currently addressing the issue on its servers.
Then, several organizations reported service interruptions. Edinburgh council and various BBC program websites became inaccessible. Other platforms like DeviantArt also went down for maintenance during this time.
Furthermore, these flaws remained hidden for more than a decade. Researchers from Calif and the PHP Foundation found them using OpenAI tools. They discovered the issue after only a few weeks of testing.
However, details of the flaw leaked on social media prematurely. This forced the PHP Foundation to announce the problem earlier than planned. Experts estimate that roughly 70 percent of the internet uses PHP.
Finally, security companies report that early attacks are already emerging. Hackers see this as a priority target. Organizations should monitor their systems closely for signs of unauthorized access. They must also update all software to the latest versions to stay safe.