3 steps to protect your website from critical PHP attacks

Two critical vulnerabilities in the PHP programming language, used by an estimated 70% of websites worldwide, were disclosed Wednesday, prompting urgent security concerns due to their ease of exploitation without authentication. Cybersecurity expert Yonaton Keller advises website owners to first identify where PHP is used in their systems, then check vulnerability scanners from firms like Tenable, Qualys, and Rapid7 to detect exposure, and finally upgrade to the current PHP version immediately. The PHP Foundation released a fix hours after informal details spread online, but exploitation attempts have already surged. Keller notes that AI accelerates both attacks and defenses, making traditional response timelines obsolete and pushing security investments toward pre-compromise protections.