What happened?
Two critical security vulnerabilities discovered in PHP have caused many websites around the world to be temporarily taken offline. The flaws could let attackers run remote code on servers running PHP.
Why it matters
PHP underpins a large share of the web, so the flaws affect a broad range of sites, from content management systems to corporate pages. Some teams are choosing to keep their sites offline until patches are applied.
What to do
Site administrators should keep PHP versions up to date and apply released security patches without delay. Public agencies have also issued notices warning organizations about the flaws.
