Skip to content
Pulse
en

Business·BBC Business·pulse 90

What is PHP and why did it spark a global cyber-security scramble?

Thursday 22 October04:48 · 1h agoAI summary
Read at source

AI discovered severe flaws in the PHP programming language, prompting a global cyber-security alert as governments and organisations rushed to patch vulnerable websites.

Follow the storyPHP3 stories

01Summary

  1. 01Vulnerabilities in PHP, a programming language used since the 2000s, were found by researchers at security firms Calif and Wiz using advanced AI tools.
  2. 02Cyber-security firm Wiz described the flaws as the 'most severe' ever detected by AI, and OpenAI called it 'one of the most impactful security issues in recent memory'.
  3. 03The flaw could allow attackers to take control of web servers without authentication; it potentially affects 'millions and millions' of websites including Wikipedia.
  4. 04Governments including the US, UK, EU, Australia and Japan urged immediate patching; some organisations like Wikimedia, the Finnish government and Edinburgh council took systems offline.
  5. 05PHP developers released patches on the day of the announcement, but experts warned further exploitation attempts are likely as technical details become public.

02Why it matters

This matters because PHP underpins a huge portion of the internet, including many sites you use daily. If your favourite websites are unavailable or urge you to change passwords, this is the reason.

Pulse AI

Answers are generated by AI from the story summary; they are not investment, health or legal advice.

Up next

More on PHP

World leaders warn of security flaws found in PHP programming language

Government websites across Europe and Asia have been taken offline to address two critical vulnerabilities in the PHP language, which powers about 70% of the internet.

Al Jazeera · 5h agoRead story

Related stories