PHP is in the foundation of 70% of websites – here's what it is and why a flaw in the software is a major hacking threat
Summary
A critical flaw in PHP has triggered urgent patching efforts worldwide after researchers found a vulnerability that could let hackers take control of websites and access data. The bug, discovered with help from an OpenAI AI model, affects millions of PHP-based sites including platforms like WordPress.
Key Points
- Governments, organizations and software vendors rushed to patch a serious PHP vulnerability that could let attackers run unauthorized commands on web servers.
- The flaw was discovered by a security research firm using an advanced OpenAI model and was reported through coordinated disclosure before patches were released.
- Hackers were already broadly attempting to exploit the issue after details leaked, according to Amazon Web Services officials.
- Most everyday internet users do not need to take action, but website owners and administrators should update PHP immediately.
