Critical PHP flaws have forced some websites offline as organizations rush to install emergency security updates. The vulnerabilities could let attackers take control of affected servers, making them a major concern for website operators.
The issue involves two critical vulnerabilities in PHP, a programming language used by many websites and online services. Researchers discovered the flaws and worked with PHP maintainers, security companies, and government agencies to coordinate a response before the public disclosure.
According to reports, the vulnerabilities could allow remote code execution under certain conditions. That means attackers may be able to run malicious code on vulnerable servers if systems remain unpatched.
Because PHP is widely used across the internet, the security update triggered a fast response from organizations around the world. Some government and public service websites temporarily went offline while administrators applied patches and checked their systems.
Researchers said the flaws may have existed for years before they were found. OpenAI said advanced AI systems helped identify the vulnerabilities, giving developers time to prepare fixes before large-scale abuse could happen.
Organizations are advised to install the latest updates, review products that use PHP, and check for signs of compromise. Security experts have also warned that attackers may start targeting systems that have not been updated.
Also Read: Hackers hit store fridges, spoil food at supermarkets
If your website or service runs on PHP, now is the time to make sure security updates are installed.
