US government says hackers are now exploiting critical PHP web bugs

Live updates

1. 3h ago

   US Government Confirms Active Exploitation of PHP Web Bugs

   The U.S. government cyber agency reports that hackers are actively exploiting critical vulnerabilities in the PHP programming language. Federal civilian agencies must apply patches by Thursday following directives from CISA. The flaws, known as PHP2Shell, affect software used across 70 percent of the web. Governments and corporations globally have taken websites offline as security teams scramble to address the threat. Chinese hackers reportedly built an exploit targeting outdated operating systems on Palo Alto Networks firewalls and breached government-affiliated systems.

   Why it matters

   PHP software powers a massive portion of web infrastructure worldwide, making security flaws in the language a systemic risk. The vulnerabilities turned into a widespread crisis within days following automated discovery by AI models. CISA's emergency directive underscores the severity of the active intrusions affecting government and corporate networks.

   What is confirmed

   • The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
   • CISA says hackers are actively exploiting the critical PHP vulnerabilities, as agencies have until Thursday to apply patches.
   • CISA confirmed hackers are actively exploiting two critical PHP vulnerabilities, known as PHP2Shell, and ordered U.S. federal civilian agencies to patch within a strict deadline.
   • Governments and companies have taken websites offline over the PHP flaws.

   Still unconfirmed

   • Chinese hackers built a PHP2SHELL exploit, used it to root 25 servers, and breached US government-affiliated firewalls using Palo Alto Networks hardware running outdated OS.

   What to watch next

   • Federal agency compliance reports following the Thursday patching deadline
   • Further telemetry on the scale of successful attacks globally
   • Additional disclosures regarding AI involvement in vulnerability exploitation
   Sources used for this update (24)

   1. techcrunch.com — TechCrunch | Startup and Technology News
   2. thehackernews.com — The Hacker News | #1 Trusted Source for Cybersecurity News
   3. www.techradar.com — TechRadar | the technology experts
   4. www.yahoo.com — Yahoo
   5. www.techtarget.com — Customer service faces a new customer: Personal AI agents | TechTarget
   6. OpenAI — Patch the Planet: global response coordination as agents uncover critical vulnerabilities
   7. CNN — The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days
   8. The Atlantic — The Safe Internet Is Shrinking
   9. The New York Times — The 5 Things You Need to Know About the PHP Security Flaw Breaking the Internet
   10. CNN — AI is exposing how fragile the web really is. What you can do to stay safe
   11. TechCrunch — US government says hackers are now exploiting critical PHP web bugs
   12. techcrunch.com — US government says hackers are now exploiting critical PHP web bugs
   confidence 100%