PHP Vulnerability Sparks Global Response
Tap title to read story
Cyber‑security firm Wiz Research announced on Wednesday that it had discovered severe security flaws in PHP, a programming language that powers about 70 percent of the world’s websites. OpenAI called the bug “one of the most impactful vulnerabilities in recent memory.” The flaws could allow attackers to take control of servers, steal data, and deface sites. Governments from the U.K. to Japan are rushing to patch affected sites. The U.S. National Security Agency warned organizations to maintain heightened awareness, while the U.K.’s National Cyber Security Centre urged immediate updates. Dozens of British, Finnish, French and Chinese government services were taken offline, and Japan’s Prime Minister Sanae Takaichi issued an urgent call for action. Cloudflare’s Matthew Prince reported tens of thousands of exploitation attempts in the first 45 minutes after the disclosure.
More context
Timeline
- On October 22 2026 Wiz Research discloses PHP vulnerability.
- On October 23 2026 Governments urge immediate PHP patching.
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.
