PHP Flaw Exposes Billions of Websites to Attack

Vocabulary

Article

A critical vulnerability in PHP, the programming language that powers roughly 70 percent of websites worldwide, triggered an urgent global response from governments and major technology companies. The flaw remained undetected for at least a decade before AI systems identified it, prompting security agencies in the UK, US, EU, and Australia to issue immediate guidance. PHP runs essential online infrastructure including Wikipedia, WordPress, and countless e-commerce platforms, meaning the exposure affected billions of internet users. When details of the flaw leaked on social media before an official embargo lifted, threat actors began attempting exploits within hours.