PHP flaws trigger global cybersecurity alert and website shutdowns

Two critical vulnerabilities in PHP, a programming language powering much of the internet, triggered a global cybersecurity alert and forced temporary shutdowns of websites and services in several countries. The flaws went undetected for over a decade and were uncovered with the help of artificial intelligence. The vulnerabilities, rated 9.2 out of 10 in severity, could allow attackers to take control of servers and steal sensitive data under the right conditions. Security firm Wiz estimates PHP powers 70% of the world's websites, including Wikipedia and many WordPress-based sites. No successful attacks had been reported as of Friday morning. The alert on October 21 affected gaming platforms and government portals, with Finland, the Netherlands, and the UK taking precautionary measures. The PHP Foundation released fixes on Wednesday, urging immediate updates. Experts expect more attack attempts since technical details are now public, and advise site administrators to install corrected versions directly.