What happened
The U.S. government's cybersecurity agency said critical flaws in PHP are now being actively used by attackers. PHP is a widely used server-side programming language that runs behind a large share of websites and web applications.
Why it matters
According to the source, PHP is used in about 70% of the web's software, meaning the flaws affect a very broad infrastructure rather than a single site. The "active exploitation" warning signals that patches should not be delayed.
Context
The warning comes after a string of PHP security advisories in recent days, pushing teams that run servers to move patching higher on their priority list.
