PHP

Amazon says PHP2Shell flaws now being broadly exploited

Government, school and hospital websites across Europe went offline on Wednesday, Oct. 21. Operators were racing to protect their servers from two critical flaws in PHP, the programming language behind a large share of the web. Some organizations in the…

PHP Foundation admits ‘structural failure’ delayed fix

The PHP Foundation said a delay in fixing one of two critical flaws in the PHP programming language "was a structural failure." It made the admission on Wednesday, October 21, after emergency patches went out and governments around the world…

Governments pull websites offline over PHP2Shell flaws

Government, school and hospital websites across Europe, Canada and the UK went offline on Wednesday, October 21. Organizations were rushing to install fixes for two critical flaws in PHP, the programming language behind a large share of the web. The…

Governments pull sites offline after AI-found PHP flaws

Government websites across Europe and Canada went offline on Wednesday, October 21, after PHP developers released emergency fixes for two critical flaws in the programming language. PHP runs a large share of the public web. "All servers using any version…

That's all for today

You've seen all the main stories from today.

Cloudflare leads cyber stock rally as PHP flaws hit sites

Cybersecurity and software stocks rallied on Wednesday, October 21, after two critical flaws in the PHP programming language led governments, hospitals and businesses across Europe to take their websites offline. Cloudflare climbed more than 6%. Datadog, Okta, Zscaler and CrowdStrike…

PHP issues emergency patches for critical PHP2Shell flaws

On Wednesday, October 21, PHP's maintainers put out unscheduled security updates for two critical flaws in the language's core engine. Together the bugs are called PHP2Shell, and they let an attacker without an account run code on web servers. BleepingComputer…

PHP to ship emergency patches for two critical flaws

PHP's security team is set to publish an out-of-cycle security release today, Wednesday, October 21, at 14:00 UTC (10:00 a.m. Eastern), fixing two vulnerabilities that each carry a 9.2 rating under CVSS v4.0, according to an advance notice on php.net.…

You're all caught up

You've seen all the main stories from the past 2 days.