Security5 sources
Critical PHP Flaws Prompt Widespread Site Outages and Patch Releases
Nearly 70% of websites need to update PHP core software to fix two critical vulnerabilities that allow full server control, and working exploits are already in the wild. PHP maintainers released patches, leading to many sites showing 404 errors and EU officials urging organizations to take unpatched sites offline.
Why it matters: Unpatched PHP servers can be fully compromised, risking downtime and data breaches for any web‑based service.
Read the coverage
Krebs on SecurityWidespread PHP Flaw May Cause Many Site Outages Today ↗krebsonsecurity.com · 14h ago
The RecordHundreds of websites taken offline as concern grows over two PHP vulnerabilities ↗therecord.media · 15h ago
The RegisterPHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched ↗theregister.com · 14h ago
ET TechExplained: What is PHP and why did it take government websites offline? ↗economictimes.indiatimes.com · 13h ago
EngadgetGovernment websites in the EU and Canada taken offline over PHP vulnerability ↗engadget.com · 8h ago
This story so far
How it developed, day by day.
Sunday 25 October
Critical PHP bugs threaten widespread web servicesSaturday 24 October
PHP team releases mitigation steps for new remote code execution flawFriday 23 October
Hackers exploited PHP2Shell bugs four days before patches releasedWednesday 21 October
PHP warns of two critical flaws, emergency patches due tomorrow
More in Security
Security3h ago6 sources
Security11h ago7 sources
