Impact widens
Critical PHP vulnerabilities found with the help of AI have affected government institutions and popular websites worldwide. According to DonanımHaber, some services were temporarily taken offline for security reasons.
Why it matters
PHP is a programming language used in the infrastructure of a large share of websites. Exploitation of the flaws can lead to unauthorized access and service disruptions at affected sites. That is why public institutions and private companies chose to temporarily disable their systems.
What is on the list?
The report presents the affected countries and sites as a list. However, the source text does not include the details of the list; the names of affected countries and sites can be found in the full story.
Background
This development is the latest chapter in the crisis around patching the critical PHP flaws. It had previously emerged that the vulnerabilities were known since 2024 and that the patching process was delayed. Findings also indicated that the flaws were exploited days before the patch.
