PHP Flaw Exposes Global Web Vulnerabilities

A critical vulnerability has been discovered in PHP, a widely used web programming language, causing global disruption. Attacks exploiting this flaw could allow website or server hijacking, system modification, and data theft, requiring immediate defensive action. PHP, an open-source software used by about 70% of global websites, had a flaw undetected for over a decade, recently identified by security firms using AI. Following the announcement on the evening of the 21st, companies, banks, and government agencies worldwide halted websites and services, with local impacts including supermarket payment failures and suspended booking systems. Fixes require patches, but many firms lack in-house engineers, and attackers also use AI, leading to data breaches like the Okinawa Tourist leak. The government plans to launch a "white hat" hacker team, while experts urge citizens to adopt basic measures like unique passwords and multi-factor authentication, highlighting risks of over-reliance on digital systems.