Organizations Scramble to Fix PHP Flaws as Attacks Rise
WHO:
Reuters - The PHP Foundation coordinated fixes for two critical PHP flaws; it operates with one full-time staff member and 14 contractors.
Drudge Report - Companies and governments are rushing to patch PHP flaws.
WHAT:
TechCrunch - The two PHP bugs threatened software used by the majority of the internet.
Inc - The PHP flaw put 70 percent of websites at risk.
Wired - Security researchers used AI tools to uncover years-old vulnerabilities in PHP, followed by AI-assisted attacks.
Inc - The PHP vulnerability affected a language that underpins sites such as WordPress, and a fix is available.
Reuters - The discovery of two serious flaws in PHP triggered a global scramble to protect websites from hackers.
Drudge Report - Hacking attempts surged as companies and governments rushed to patch PHP flaws.
WHY:
TechCrunch - The PHP bugs were described as a potential internet-wide software scare, with the article noting similar major scares may happen again.
Reuters - The fixes and website-protection efforts followed the discovery of two serious PHP flaws.
Drudge Report - Companies and governments rushed to patch the flaws amid increased hacking attempts.
(UPDATED October 24, 2026 16:00 UTC)
Two serious flaws in PHP have triggered a global rush to protect websites, as hacking attempts surge and companies and governments hurry to install fixes. The vulnerabilities threatened software used across much of the internet, with one estimate putting 70 percent of websites at risk. PHP also underpins widely used platforms such as WordPress, so the potential exposure is extensive. A fix is available, and the PHP Foundation coordinated the work to address both flaws. The foundation operates with just one full-time staff member and 14 contractors. Security researchers used artificial intelligence tools to uncover vulnerabilities that had gone unnoticed for years, and AI-assisted attacks followed. The episode has been described as a potential internet-wide software scare, highlighting how quickly weaknesses in widely used technology can become a broad security emergency.
--
(UPDATED October 24, 2026 13:04 UTC)
Two serious vulnerabilities in PHP, a programming language that underpins websites including those built with WordPress, have triggered a worldwide effort to protect sites from hackers. Security researchers used artificial intelligence tools to uncover the flaws, which had gone undetected for years. After the vulnerabilities were revealed, hacking attempts surged, prompting companies and governments to rush out patches. A fix is available, and website operators are working to install it and reduce the risk of attacks. Coordinating the response was the PHP Foundation, a small organization with one full-time staff member and 14 contractors. The episode highlights how flaws in widely used software can put a large number of websites at risk. It also shows how AI tools can help uncover old security weaknesses, while AI-assisted attacks may follow their discovery.
--
(UPDATED October 24, 2026 12:00 UTC)
Two serious flaws in PHP have set off a global scramble to protect websites, as hacking attempts surge and companies and governments rush to install fixes. PHP is widely used to run websites, making the vulnerabilities a concern for organizations that rely on it. The PHP Foundation coordinated the work to address both flaws and help users secure their systems. The effort comes from a remarkably small organization, with just one full-time staff member and 14 contractors. Meanwhile, the increased hacking activity has added urgency to patching vulnerable systems. Organizations are working to close the security gaps before attackers can exploit them. The response reflects how a flaw in widely used software can quickly become a worldwide security challenge.