● Covered by 1 source · 2 reportsHigh impact2 neutral
Critical PHP Vulnerabilities Lead to Global Website Shutdowns and Urgent Patching
Key points
- Two critical PHP vulnerabilities were discovered.
- A fix for the flaws was issued on Wednesday.
- Many websites, including government sites, went offline.
- AI tools from OpenAI helped discover the vulnerabilities.
- Websites went offline on Thursday.
- 32 government services were unavailable, and four were partially unavailable.
- Baroness Lloyd of Effra stated the number of affected government services.
Critical PHP Flaws Discovered
Two critical cybersecurity vulnerabilities were identified within the PHP programming language, which is used by approximately 70% of the internet. These flaws were deemed severe enough to prompt international warnings and immediate action from various organizations.
Urgent Patch and Website Shutdowns
A fix for the vulnerabilities was released on Wednesday afternoon. In response, multiple cybersecurity agencies advised organizations unable to apply the patch immediately to take their websites offline. This led to temporary shutdowns of public web services for the Finnish government, the Netherlands' cybersecurity agency, and parts of Wikipedia, among others. The US National Security Agency also issued similar guidance, noting that these vulnerabilities often provide a direct path to server file systems or databases.
AI-Assisted Discovery
The vulnerabilities were discovered by cybersecurity researchers from Calif and Wiz, utilizing AI tools provided through OpenAI's "Patch the Planet" program. Wiz described them as the "most severe vulnerabilities ever discovered" by AI, indicating the growing role of artificial intelligence in cybersecurity research.
Widespread Impact and Response
The impact was widespread, affecting various entities globally. The Wikimedia Foundation confirmed it was addressing the security issues, leading to temporary inaccessibility for some Wikipedia sections. Edinburgh council's website and several BBC program pages also became inaccessible. The White House stated that federal agencies are collaborating with leading AI labs to accelerate the fix, and Japan's Prime Minister urged citizens to check if their public websites run on PHP.
Updates
- Websites went offline on Thursday.
- 32 government services were unavailable, and four were partially unavailable.
- Baroness Lloyd of Effra stated the number of affected government services.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Critical security flaws discovered in PHP, a widely used programming language, have led to organizations globally scrambling to update systems and some government services being taken offline as a precaution. While no successful attacks have been reported, the vulnerabilities could expose millions of websites to potential hacks, necessitating urgent patching.
Two critical cybersecurity flaws in the PHP programming language, which powers 70% of the internet, were discovered and a fix was issued. Governments and organizations, including the Finnish government and parts of Wikipedia, took websites offline as a precautionary measure while applying the update. The vulnerabilities were found by AI tools from OpenAI's "Patch the Planet" program, highlighting the severity and the rapid response required.