CSA and NITA order government institutions to fix critical PHP vulnerabilities within seven days
A critical security flaw in the widely-used PHP programming language has been detected, leading to the disabling of websites worldwide[1–10]. The vulnerability, discovered by artificial intelligence, allows for remote execution of malicious code and server takeover without authentication[5]. Governments and security firms have issued emergency responses as hackers begin to exploit the flaw[2, 5, 7]. PHP developers are urged to apply security updates immediately[9].
This brief was written by a language model from the reports below; bracketed numbers link to them. Check the reports for anything that matters.
Reports
- Thirty-two Government services offline amid PHP cybersecurity issuePublished by midweekherald.co.uk, dorsetecho.co.uk, sloughobserver.co.uk, ludlowadvertiser.co.uk, wimbledonguardian.co.uk, thecomet.net, westerntelegraph.co.uk, burnhamandhighbridgeweeklynews.co.uk, braintreeandwithamtimes.co.uk, wirralglobe.co.uk, basingstokegazette.co.uk, dailyecho.co.uk and 100 more ·
- 'Limited' Government services temporarily offline amid PHP cybersecurity issuePublished by newarkadvertiser.co.uk, thewestonmercury.co.uk, cambstimes.co.uk, bromsgroveadvertiser.co.uk, thetelegraphandargus.co.uk, wimbledonguardian.co.uk, newsandstar.co.uk, hamhigh.co.uk, eastlondonadvertiser.co.uk, leaderlive.co.uk, greenocktelegraph.co.uk, ealingtimes.co.uk and 3 more ·
- 32 government services down amid PHP cybersecurity issuePublished by oxfordmail.co.uk, heraldseries.co.uk, cravenherald.co.uk, witneygazette.co.uk, chelmsfordcitynews.co.uk, yourlocalguardian.co.uk, messengernewspapers.co.uk, wharfedaleobserver.co.uk, burytimes.co.uk ·
- Millions of hacking attempts as companies, governments rush to patch PHP flawsPublished by chinatechnews.com, brecorder.com, businesstimes.com.sg, emirates247.com, businessinsurance.com, insurancejournal.com ·
- Websites struggle after AI-discovered flaw sparks security scramblePublished by greatbendpost.com, jcpost.com, hayspost.com, littleapplepost.com ·
- PHP vulnerability 2026: Websites shut down globally as operators address AI-detected flaw in web programming languagePublished by abc30.com, abc7news.com, 6abc.com, abc7.com ·
- PHP-Sicherheitslücke: Millionen Hackerangriffe weltweitPublished by bazonline.ch, bernerzeitung.ch, tagesanzeiger.ch ·
- Was die PHP-Sicherheitslücke für das Internet bedeutetPublished by muensterschezeitung.de, die-glocke.de, westfalen-blatt.de ·
- O que é PHP e a falha grave de segurança detectada por IA que tirou sites do arPublished by correiobraziliense.com.br, em.com.br, globo.com ·
- 32 UK Government services taken offline amid critical PHP security vulnerabilityPublished by bristolpost.co.uk, somersetlive.co.uk, plymouthherald.co.uk ·
- Τι είναι η PHP που προκάλεσε «μπλακ άουτ» σε χιλιάδες ιστοσελίδες παγκοσμίως -Έγιναν εκατομμύρια απόπειρες κυβερνοεπίθεσηςPublished by iefimerida.gr, inewsgr.com ·
- Websites across world hit by millions of attempts to exploit PHP code flawPublished by thefrontierpost.com, theguardian.com ·
- İngiltere'de siber güvenlik krizi! 32 kamu hizmeti devre dışı kaldıPublished by turkiyegazetesi.com.tr, bursadabugun.com ·
- Qeveria britanike raporton ndërprerje në 32 shërbime për shkak të një problemi të sigurisë kibernetikePublished by almakos.com, shenja.tv ·
- Falha no PHP: sites em risco e o que se deve fazer?Published by sapo.pt, sapo.pt ·
- Συναγερμός στο Διαδίκτυο: Εκατομμύρια κυβερνοεπιθέσεις μετά την αποκάλυψη κρίσιμων κενών ασφαλείας στη γλώσσα PHPPublished by inewsgr.com, tanea.gr ·
- PHP存在严重安全漏洞 多国机构网站临时下线Published by qianlong.com, news.baidu.com ·
- Millions of hacking attempts as companies, govts rush to patch PHP flawsPublished by samaa.tv, freemalaysiatoday.com ·
- İngiltere'de siber güvenlik açığı: 32 kamu hizmeti devre dışıPublished by yenisafak.com, bursahakimiyet.com.tr ·
- Millions of hacking attempts amid rush to patch PHPtaipeitimes.com · en ·
- Milioni pokušaja hakovanja zbog sigurnosnih propusta u PHP-ufena.ba · bs ·
- Cyber security scare forces UK to suspend 32 servicesdailytimes.com.pk · en ·
- Que se cache-t-il derrière la faille PHP qui a secoué Internet ?lalibre.be · fr ·
- Falla di sicurezza PHP: perché i siti web in Europa si spengono e cosa significa per teeuronews.com · it ·
- PHP flaws spark global alarm, Indian firms scramble to patch systemsthehindubusinessline.com · en ·
- PHP security flaws trigger global scramble; CERT-In flags critical vulnerabilitiesindiatimes.com · en ·
- 32 UK government services unavailable due to global cyber-security issue, Minister saysgbcghanaonline.com · en ·
- Websites go dark as AI exposes critical security flawssingaporestar.com · en ·
- Asian governments step up cyber defenses after PHP flawmanilatimes.net · en ·
- CSA and NITA order government institutions to fix critical PHP vulnerabilities within seven daysmyjoyonline.com · en ·
- ИИ нашел «дыры» в PHP: что это и чем опасно для пользователей интернетаnews.mail.ru · ru ·
- Critical PHP Flaws Spur Global Patch Effort, Temporary Shutdownsclaimsjournal.com · en ·
- Alertan por fallas críticas en PHP: podrían comprometer servidores webelheraldo.co · es ·
- Webbplatser släcks ned världen över efter allvarliga PHP-bristerevertiq.se · sv ·
- PHP security crisis prompts websites worldwide to push updates for critical vulnerabilitiesaa.com.tr · en ·
- Critical PHP vulnerabilities threaten your NAS, not every vendor has a fixappleinsider.com · en ·
- Global cyber scare: Govt portals, hospitals, financial services shut over PHP flawsindiatoday.in · en ·
- Más de 30 servicios del Gobierno británico no están disponibles por vulnerabilidad de ciberseguridad globalrpp.pe · es ·
- Explainer: What is the PHP flaw, why did it affect Irish websites and how was AI involved in finding the vulnerabilities?independent.ie · en ·
- Internet está en alerta: las brechas de seguridad en PHP que ponen en riesgo a millones de servidoreslasexta.com · es ·
- PHP-Attacken: Wie dramatisch ist die Lage wirklich?kleinezeitung.at · de ·
- AI爆PHP漏洞引發全球網絡攻擊潮：為何影響如此廣泛 ？tw.news.yahoo.com · zh ·
- Τι είναι η PHP που προκάλεσε «μπλακ άουτ» σε χιλιάδες ιστοσελίδες παγκοσμίως – Εγιναν εκατομμύρια απόπειρες κυβερνοεπίθεσηςtaxydromos.gr · el ·
- EXPLAINER - What are the critical PHP flaws uncovered by AI, and why do they matter?Anadolu Agency (English) · en ·
- Një problem në PHP vë në alarm botën digjitale, disa institucione mbyllin faqet e tyrezhurnal.mk · sq ·
- Failles PHP : que faire pour préserver votre site ?RTBF Info · fr ·
- Varnar efter säkerhetshålen i PHPsvd.se · sv ·
- Sicherheitslücke bei PHP: PHP: Was genau ist passiert und wie schwer wiegt das Problem?newsfeed.zeit.de · de ·
- Milioni web-stranica u opasnosti od hakerskih napadartvslon.ba · bs ·
- PHP flaws prompt millions of hacking attempts amid rush to patch vulnerabilitiesen.prothomalo.com · en ·
- Qué es PHP y por qué generó una alerta de seguridad globalsinembargo.mx · es ·
- Una falla en PHP expone a millones de sitios web y activa una alerta mundial de ciberseguridadeldiariony.com · es ·
- AI-powered hackers exploit PHP flaw as Europe takes government websites offline; NSA warns of cyberattack riskshindustantimes.com · en ·
- PHP-Schwachstellen – Was bedeutet die Sicherheitslücke für User?SRF News · de ·
- PHP-Sicherheitslücke: Darum musst du in den nächsten Wochen wachsam sein20min.ch · de ·
- More than 30 Government services offline due to security flawstandard.co.uk · en ·
- 32 British gov't services offline amid PHP security threat: report-Xinhuaenglish.news.cn · en ·
- ¿Qué es PHP y por qué generó una falla de seguridad en internet?bitlysdowssl-aws.com · es ·
- 编程语言PHP严重漏洞引发全球紧急修复 多地网站暂时下线sina.com.cn · zh ·
- Kritische PHP-Lücke: Müssen Nutzer jetzt ihre Passwörter ändern?abendblatt.de · de ·
- Sicherheitslücke auf Websites: Was Sie jetzt tun müssen, um sich abzusichernnoz.de · de ·
- Сотни миллионов сайтов оказались под угрозой взлома из-за уязвимостей в языке программирования PHP. Насколько это опасно? И угрожает ли что-то лично вам?meduza.io · ru ·
- Hacking attempts surge as websites race to patch PHP issuesabc.net.au · en ·
- „Könnte Jahre dauern": PHP-Sicherheitslücke: Ist die Gefahr jetzt gebannt?lr-online.de · de ·
- Weltweit Probleme nach Sicherheits-Lücke im Internetvol.at · de ·
- Εκατομμύρια απόπειρες χάκινγκ σε υπηρεσίες και εταιρείες – Συναγερμός για τα κενά ασφαλείας στη γλώσσα PHPin.gr · el ·
- Governos e empresas tentam corrigir falhas de PHP após milhões de ataquesuol.com.br · pt ·
- Fears of ‘wider’ cyberattack as ‘critical flaw’ forces thousands of websites to shut downirishcentral.com · en ·
- Millones de intentos de hackeos después de que se descubriera un fallo de seguridad en el lenguaje PHP de las websabc.es · es ·
- Εκατομμύρια απόπειρες hacking - Συναγερμός σε κυβερνήσεις και εταιρείεςavgi.gr · el ·
- Caos en la red por PHP: gobiernos en todo el mundo cierran sitios web tras alerta de seguridadacento.com.do · es ·
- Alerta mundial por fallas en PHP: ¿Qué es y por...panamericana.pe · es ·
- Was die PHP-Sicherheitslücke für das Internet bedeutet | Nachrichten aus aller Weltlz.de · de ·
- PHP-Sicherheitslücke: Risiko noch nicht voll behoben – Experte warnt vor Online-Shoppingmoz.de · de ·
- 多国政府网站紧急下线 PHP严重漏洞触发_新闻频道_中华网china.com · zh ·
- Krytyczne luki w bezpieczeństwie, miliony stron internetowych zagrożone. Skutki na latawnp.pl · pl ·
- What is PHP and why has it caused chaos for millions of websites?independent.co.uk · en ·
- 32 UK govt services go offline over cybersecurity issuetribuneonlineng.com · en ·
- Почему уязвимости в PHP затрагивают миллионы сайтов и как защититься от атак. Обзор "РГ"rg.ru · ru ·
- Венгрия приостанавливает работу госсайтов из-за угрозы безопасностиarhperspectiva.ru · ru ·
- Governments race to patch flaws in PHP, a programming language used to run websiteschannelnewsasia.com · en ·
- পিএইচপির ত্রুটি ঠিক করতে বিশ্বজুড়ে দৌড়ঝাঁপ, লাখ লাখ হ্যাকিংয়ের চেষ্টাprothomalo.com · bn ·
- PHP güvenlik açığı interneti tehdit ediyor: e-Devlet ve bankalar riskte mi?i12.haber7.net · tr ·
- Хакерската атака на PHP удари и правителствата на редица държавиbgonair.bg · bg ·
- Site-uri din întreaga lume, scoase offline din cauza unor vulnerabilități critice în PHPziarulnational.md · ro ·
- UK Government takes 32 services offline amid PHP vulnerability crisisgazettelive.co.uk · en ·
- Websites go dark as AI exposes critical PHP security flawstechcentral.ie · en ·
- UK government reports disruption to 32 services amid cybersecurity issueAnadolu Agency (English) · en ·
- 32 servicios del Gobierno británico no están disponibles por ciberseguridad globalnoticiassin.com · es ·
- ثغرات أمنية خطيرة في لغة PHP تهدد ملايين المواقع: كيف تحمي بياناتك؟khabaragency.net · ar ·
- بريطانيا تكتشف ثغرة أمنية خطيرة في لغة البرمجة PHP تهدد المواقع الإلكترونيةcawalisse.com · ar ·
- PHP security flaw triggers global cyber alert, millions of websites at riskdhakatribune.com · en ·
- İngiltere'de siber güvenlik krizi: 32 kamu hizmeti durduruldudunya.com · tr ·
- Sitios web de todo el mundo quedan desactivados tras detectarse una falla de seguridad crítica en internetlaopinion.com · es ·
- PHP-Sicherheitslücke: Diese Risiken bleiben für Unternehmenwiwo.de · de ·
- 32 government services offline over PHP security flawbmmagazine.co.uk · en ·
- Un fallo crítico en PHP fuerza el apagón preventivo de ministerios y hospitales en toda Europa: 7 de cada 10 webs afectadaslaregion.es · es ·
- Cybersecurity warning: Major websites face potential global threatthenews.com.pk · en ·
- Reuters: Vulnerabilităţi critice în PHP au determinat oprirea preventivă a unor site-uri guvernamentale din Europabursa.ro · ro ·
- Government agencies given 7 days to patch critical PHP flawsgraphic.com.gh · en ·
- İngiltere'de PHP açığı nedeniyle 32 kamu hizmeti devre dışı kaldıhaberler.com · tr ·
- PHP-Sicherheitslücke: Programmiersprache, jetzt unverständlichkurier.at · de ·
- Major PHP cybersecurity flaw hits UK government sites and millions worldwidedailypost.co.uk · en ·
- Венгрия на 48 часов отключила правительственные сайты из-за уязвимости PHPlife.ru · ru ·
- Sicherheitslücke PHP2Shell: Hacker versuchen weltweit millionenfach, die PHP-Lücke auszunutzenpartner-feeds.publishing.tamedia.ch · de ·
- Dünyada siber güvenlik alarmı!yenisafak.com · tr ·
- 32 government services offline due to PHP crisis - full list so farbirminghammail.co.uk · en ·
- What is PHP & the security flaw found in many websites?bbc.co.uk · en ·
- PHP patches critical flaws as government websites go darkwn.com · en ·
- ¿Qué es PHP y por qué generó una falla de seguridad en internet que desató una alerta global?prensalibre.com · es ·
- PHP-Lücken verändern das Internet: Vier Risiken treffen auch normale Internetnutzerchip.de · de ·
- Скрытая угроза длиной в 10 лет: Могут ли хакеры получить доступ к данным сайтов через ошибки PHPrg.ru · ru ·
- ¿Qué es PHP y por qué una falla de seguridad puso en alerta a internet?ambito.com · es ·
- PHP爆漏洞 全球資安拉警報tw.news.yahoo.com · zh ·
- 32 government services down amid PHP cybersecurity issue | Clacton and Frinton Gazetteclactonandfrintongazette.co.uk · en ·
- La vulnerabilidad crítica de PHP tumba webs de gobiernos europeos: toca actualizar medio internetque.es · es ·
- UK government issues statement as 32 services offline after cybersecurity issueliverpoolecho.co.uk · en ·
- Vulnerabilităţi critice în PHP: site-uri guvernamentale scoase temporar din funcţiune, pe fondul atacurilor ciberneticemonitoruldegalati.ro · ro ·
- 32 government services down amid PHP cybersecurity issue | The Westmorland Gazettethewestmorlandgazette.co.uk · en ·
- Governments, companies across the world take websites offline over PHP flawsemirates247.com · en ·
- Dünya şokta: Milyonlarca internet sitesi güvenlik problemi sebebiyle erişime kapatıldısamanyoluhaber.com · tr ·
- Schwere Sicherheitslücke entdeckt: Wie gefährlich die PHP-Krise für Internetnutzer iststimme.de · de ·
- Millions of hacking attempts hit as PHP flaws exposedbusinessday.co.za · en ·
- PHP cyber threat rocks internet as government and companies scramble to fend off attackscityam.com · en ·
- How two PHP flaws brought down websites around the worldthedailystar.net · en ·
- L'article à lire pour comprendre d'où vient la faille de sécurité mondiale qui affecte autant de sites Internetnicematin.com · fr ·
- What is PHP and why did it spark a global cyber-security scramble? - Internationaldailymirror.lk · en ·
- PHP açığı dünyayı alarma geçirdi! Banka hesapları, sosyal medya, e-devlet ve diğer dijital hizmetler için hangi önlemler alınmalı?milliyet.com.tr · tr ·
- Qué es PHP y por qué sus fallas afectaron a millones de sitios web en el mundo y encendieron alertas de ciberseguridadinfobae.com · es ·
- PHP-Sicherheitslücke: Wie gefährlich ist die Lage für Internetnutzer?morgenpost.de · de ·
- 32 خدمة حكومية تتوقف في المملكة المتحدة بسبب أزمة PHPcedarnews.net · ar ·
- Some UK Government services taken offline amid 'critical' PHP cyber security threatchroniclelive.co.uk · en ·
- Zraniteľnosť v PHP vyvolala obavy z kyberútokov. Úrady a firmy opravujú svoje weby v zahraničí aj na Slovenskuspravy.stvr.sk · sk ·
- Why a flaw in PHP has put the internet's underlying code under scrutinybusiness-standard.com · en ·
- Мільйони спроб зламу після виявлення вразливості PHP - уряди та компанії терміново оновлюють системи - новини технологійzn.ua · uk ·
- Госсайты отключаются по всему миру из-за «дыры» в PHP. Wikipedia выключила часть системcnews.ru · ru ·
- ¿Qué es PHP, el lenguaje de programación con una falla peligrosa detectada por IA?wapa.tv · es ·
- What is PHP and why is it facing a security crisis | Explainedthehindu.com · en ·
- Cybersicherheit: Wer muss jetzt dringend handeln? Die wichtigsten Fragen und Antworten zur PHP-Sicherheitslückehandelsblatt.com · de ·