New York government sites patch critical PHP security flaw

A critical security flaw in PHP, a programming language powering roughly 70% of websites, is forcing global shutdowns as developers rush emergency patches. The vulnerability lets hackers take over servers without passwords, prompting New York government sites to implement safety measures. The flaws allow attackers to bypass standard security measures entirely, executing their own commands on vulnerable servers. Discovered using artificial intelligence, the threat spreads instantly, according to cybersecurity experts. Government, school, and hospital websites across Europe have already gone offline as a precaution. Broome County has taken its main website offline, while the New York State Office of Information Technology Services confirmed patches or mitigating controls are applied. Experts advise site operators to verify patched versions and urge users to enable multi-factor authentication and monitor accounts for unusual activity.