Technology · Malaysia Bureau
Critical PHP flaws force global website shutdowns, security alert issued
Significant vulnerabilities discovered in PHP, the widely-used server-side programming language, have prompted government agencies and corporations worldwide to take systems offline as a precautionary measure. The security exposures pose risks to millions of websites relying on the technology.
LSN Malaysia ·

A series of critical security flaws in PHP has triggered an unprecedented wave of website outages globally, with both government departments and multinational enterprises moving swiftly to disable affected systems. The vulnerabilities, which affect core functionality in the programming language used to power a substantial portion of the world's web infrastructure, represent a significant threat to digital operations across sectors.
The discovery of these weaknesses has prompted rapid response protocols from cybersecurity agencies and technology firms, with advisories circulated to identify and patch vulnerable systems. Organisations across Asia-Pacific and beyond have initiated defensive measures, including taking services offline to prevent potential exploitation.
PHP remains among the most deployed server-side scripting languages globally, powering everything from content management systems to financial platforms and government portals. The scale of affected infrastructure underscores the interconnected nature of digital systems and the cascading impact such vulnerabilities can trigger.
Security experts have urged organisations to implement patches and updates immediately upon availability. The incident highlights ongoing challenges in securing legacy systems and the importance of maintaining robust cybersecurity postures amid evolving threat landscapes. Further advisories are expected as investigation into the flaws continues.