Critical PHP flaws spark global cyberattack surge, mass shutdowns

Critical security flaws discovered in PHP, one of the internet's most commonly used programming languages, have unleashed a wave of cyberattack attempts across the globe as companies and government agencies race to implement fixes.

The vulnerabilities prompted a precautionary approach from organisations worldwide, with many choosing to temporarily shut down websites and services rather than risk exploitation while patches remained unavailable. Security researchers warned that the flaws presented significant risks to the millions of websites and applications built on the PHP platform.

Technical teams across private and public sectors have been working around the clock to apply security updates as vendors released patches addressing the identified vulnerabilities. The surge in hacking attempts documented during the window between vulnerability disclosure and patch availability underscores the risks posed by flaws in foundational web technologies.

PHP powers an estimated 77 percent of all websites with a known server-side programming language, making security issues in the platform a matter of global concern. Cybersecurity experts advised organisations to prioritise patching efforts and implement additional security measures to protect systems during the transition period.