PHP security flaw forces global websites offline

g1.globo.com (Portuguese) —

A critical security vulnerability was discovered in PHP, a widely used programming language, forcing websites worldwide offline and prompting urgent calls for emergency patches. The flaw allows hackers to take control of servers without authentication and steal sensitive data. The vulnerabilities, found using AI tools by cybersecurity firms Wiz and Calif, were described as the most severe ever detected by AI. Governments and agencies, including the US NSA, urged immediate updates or system shutdowns, with organizations like Wikipedia and the BBC taking precautionary measures. The PHP developers released fixes on Wednesday, but experts warn of likely exploitation attempts in coming weeks. The incident highlights AI's dual role in discovering security flaws and potentially aiding attackers, with users advised to watch for phishing scams.


With a significance score of 5.1, this news ranks in the top 1.2% of today's 28754 analyzed articles.

Get summaries of news with significance over 5.5 (usually ~10 stories per week). Read by 10,000+ subscribers: