Symbolic imageSites taken offline over two critical PHP flaws are largely back after the fix, but experts say patching alone is not enough. Germany's BSI reports no successful attacks so far, while Cloudflare's chief executive warns that more dangers on this scale lurk online.
PHP is a widely used server-side programming language that powers a large share of websites, with figures of up to 70% cited. Security agencies such as the US NSA, Germany's BSI and Britain's NCSC warn operators to patch critical flaws quickly or take affected systems offline.
Cloudflare's chief executive says more dangers on the scale of the PHP flaws lurk on the internet, Nikkei Asia reports. Telesur describes two critical PHP2Shell flaws that allow unauthenticated remote code execution, while FAZ writes that Germany took websites offline after Americans found a vulnerability.
Many websites pulled offline after the PHP flaws were disclosed on Tuesday are back, but security experts say updates alone fall short. Executives warn that AI will find such bugs faster than they can be patched.
Two critical PHP flaws found with AI tools forced agencies and firms to pull websites offline on Wednesday. Cloudflare reports millions of exploit attempts, while many sites are back.
Two critical flaws in PHP, used by up to 70% of websites, led agencies and firms to take sites offline on Wednesday. The developers released fixes that afternoon.