From Malay Mail · · 1m 20s
Websites worldwide shut down after critical PHP flaws
Critical PHP flaws force global websites offline as hackers exploit server vulnerabilities.
In brief
Critical PHP flaws force global websites offline as hackers exploit server vulnerabilities. Critical PHP flaws exposed servers to hackers, causing global website shutdowns before a fix could be deployed. Originally reported by Malay Mail.
Critical PHP flaws expose servers
Critical PHP flaws exposed servers to hackers, causing global website shutdowns before a fix could be deployed.
“Details leaked online Tuesday, a day before the planned release of the fix, prompting the rush to take sites offline before hackers could exploit them”
PHP powers 70% of websites
PHP runs about 70 percent of the world's websites, making it critical for global internet infrastructure.
“Wiz, one of the security firms that found the flaws, estimated that php runs about 70 percent of the world’s websites”
NSA urges immediate patching
The U.S. National Security Agency told organizations to patch systems immediately or take them offline.
“The us national security agency told organizations to patch immediately or pull vulnerable systems offline”
PHP Foundation warns of urgent update
The PHP Foundation said updating php is imperative to prevent server takeovers.
“If you run php, it is imperative that you update now”
AI models found critical flaws
Security firms used ai models to discover php flaws, marking a new phase in ai-driven vulnerability detection.
“Openai said on x that it considered the flaws one of the most impactful vulnerabilities in recent memory”
Global websites affected
Government websites in france, netherlands, and australia went offline as a precaution against the flaws.
“In france local government websites including one for the paris police were made inaccessible”
Pokemon apps temporarily offline
Several pokemon apps went offline for emergency maintenance to address php vulnerabilities.
“Several pokemon apps including pokemon home pokemon champions and pokemon sleep went offline wednesday for emergency maintenance”
Flaws could compromise server security
Attackers could take over web servers without passwords using the critical php flaws.
“The flaws often provide a direct path to the servers file system or database”
Fix released but details leaked
Details leaked online a day before the fix was released, prompting urgent website shutdowns.
“Details leaked online tuesday a day before the planned release of the fix prompting the rush to take sites offline before hackers could exploit them”
The headline
Critical PHP flaws exposed servers to hackers, causing global website shutdowns before a fix could be deployed.
