The internet is having a very bad cybersecurity day
Websites around the globe face severe disruptions and emergency shutdowns as operators rush to address two critical remote code execution vulnerabilities discovered in PHP. The security flaws impact seventy percent of the internet, allowing unauthorized attackers to seize control of servers without a password. Global response coordination involving tech giants such as Google, OpenAI, and Amazon is underway alongside advisories from cybersecurity authorities including the NSA. Millions of exploitation attempts have already targeted vulnerable systems worldwide.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ Two critical remote code execution bugs in PHP put seventy percent of the internet at risk.
- ✓ The vulnerabilities allow strangers to take over servers without a password.
- ✓ Websites worldwide have been hit by millions of attempts to exploit the PHP code flaw.
- ✓ Major technology companies including Google, OpenAI, and Amazon are responding to the global security alarms.
What changed
AI-driven discovery of critical PHP vulnerabilities triggered widespread global emergency responses and website shutdowns.
Live updates
-
Critical PHP Flaws Threaten Internet Infrastructure
Websites around the globe face severe disruptions and emergency shutdowns as operators rush to address two critical remote code execution vulnerabilities discovered in PHP. The security flaws impact seventy percent of the internet, allowing unauthorized attackers to seize control of servers without a password. Global response coordination involving tech giants such as Google, OpenAI, and Amazon is underway alongside advisories from cybersecurity authorities including the NSA. Millions of exploitation attempts have already targeted vulnerable systems worldwide.
Why it matters
PHP is a foundational web programming language that runs a vast majority of internet servers. The discovery of these critical bugs triggered an unprecedented global security alert as artificial intelligence tools aided both in uncovering the vulnerabilities and coordinating the emergency response. Governments and cyber agencies have stepped in to warn website operators that systems may need to go offline if immediate patches are not applied.
What is confirmed
- Two critical remote code execution bugs in PHP put seventy percent of the internet at risk.
- The vulnerabilities allow strangers to take over servers without a password.
- Websites worldwide have been hit by millions of attempts to exploit the PHP code flaw.
- Major technology companies including Google, OpenAI, and Amazon are responding to the global security alarms.
- Cloudflare has deployed protections against the vulnerability.
Still unconfirmed
- Websites may need to be permanently taken offline due to the severity of the vulnerabilities.
What to watch next
- Deployment and adoption rates of the emergency PHP security patches.
- Further updates and defensive measures from cloud providers and global cybersecurity agencies.
confidence 100%Sources used for this update (23)
- www.dailymail.com — UK Home | Daily Mail Online
- help.naver.com — Futures Flat As Oil Rebounds After Trump's "Energy Ceasefire" Unravels, Memory Stocks Slide | ZeroHedge
- www.theguardian.com — AI godfather Geoffrey Hinton: ‘We’re creating alien beings. I’m willing to be selfish and choose humans’ | Donald Trump
- arstechnica.com — The Internet goes on high alert after discovery of 8 compromised TLS certs
- Reuters — EU agency warns websites may need to be taken offline as PHP prepares patches for vulnerabilities
- National Cyber Security Centre — Critical security issue affecting PHP
- BBC — Cyber chiefs tell websites to make critical safety update or go offline
- wiz.io — PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
- Cloudflare Blog — Cloudflare deploys protections against php2shell vulnerability
- OpenAI — Patch the Planet: global response coordination as agents uncover critical vulnerabilities
- TechCrunch — The internet is having a very bad cybersecurity day
- The Verge — PHP: The three letters that shut down sites all over the internet today
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community