Stories

Thu, 22 Oct 2026

Thu, 22 Oct 2026 What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

* A global cyber-security alert has been issued due to a vulnerability discovered in the PHP programming language.
* The flaw, which allows attackers to take control of affected web servers without authentication and steal sensitive data, was detected by artificial intelligence (AI) tools.
* The vulnerability affects millions of websites worldwide, including Wikipedia, WordPress, and online shops.
* Governments and cyber-security agencies around the world have scrambled to contain the fallout, urging website operators to install a new emergency fix or take their platforms offline.
* Experts warn that poorly maintained websites, particularly those belonging to smaller organizations with limited security resources, are at greater risk.
* The developers of the PHP platform have rolled out patches to fix the vulnerabilities, and authorities are urging all organizations that use PHP to update immediately.
* The US National Security Agency has warned of a "direct path" to exploit a system's database through this vulnerability, and has advised organizations to take their systems offline if they cannot patch them immediately.