Critical PHP flaws trigger global scramble to patch websites

· Cybersecurity · United States

Governments and businesses worldwide scrambled to contain fallout after critical vulnerabilities in PHP, a widely used programming language underpinning many websites, leaked online. Websites went offline in several countries, Japan urged rapid patching and said it would simulate cyberattacks, and the US kept affected government sites running while Japan took some down. The flaws were uncovered with the help of AI, which found long-hidden weaknesses in the internet's code. The PHP Foundation, which maintains the language, is "under-funded" with just one full-time staff member, its director said. Experts warn more such discoveries, and outages, may follow.

Why it matters：A single open-source language used by a large share of the web has become a systemic vulnerability, showing how thin maintenance funding can put global digital infrastructure at risk.

Key points

  • AI tools uncovered the long-hidden flaws
  • Japan urged fast patching and planned attack simulations
  • The PHP Foundation has one full-time staff member

Sources (original reporting)

More stories from this day