{"id":10520,"date":"2026-10-22T00:15:10","date_gmt":"2026-10-22T00:15:10","guid":{"rendered":"https:\/\/sotnews.agency\/?p=10520"},"modified":"2026-10-22T00:15:10","modified_gmt":"2026-10-22T00:15:10","slug":"world-leaders-warn-against-security-flaw-found-in-php-computer-programming-cybersecurity-news","status":"publish","type":"post","link":"https:\/\/sotnews.agency\/?p=10520","title":{"rendered":"World leaders warn against security flaw found in PHP computer programming | Cybersecurity News"},"content":{"rendered":"
\n
\n \t<\/i> Read Time:<\/span>2 Minute, 24 Second <\/div>\n\n <\/div>


\n<\/p>\n

\n

Artificial intelligence was used to pinpoint two vulnerabilities in the PHP programming language, used by more than 70 percent of websites.<\/em><\/p>\n<\/div>\n

\n
\n
<\/p>\n
\"\"<\/div>\n

<\/a><\/div>\n<\/div>\n

\n

Published On 22 Oct 2026<\/span>22 Oct 2026<\/span><\/p>\n<\/div>\n<\/div>\n

\n

Authorities in Europe, Asia and other continents have temporarily taken some government websites offline to protect against newly discovered security vulnerabilities in a programming language used to power the vast majority of sites on the internet.<\/p>\n

On Wednesday, the vulnerabilities in the PHP programming language prompted a rare public warning from the United States National Security Agency (NSA), which advised websites be taken offline if they could not immediately be updated.<\/p>\n

\n

Recommended Stories <\/h2>\n

list of 3 items<\/span>end of list<\/span><\/section>\n

\u201cEffective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities,\u201d the NSA said in a social media post.<\/p>\n

In Germany, the digital ministry said it took some websites offline as a preventative measure. France\u2019s interior ministry deactivated the official websites for local administrative offices.<\/p>\n

Authorities in Belgium, the Netherlands, Finland and the Czech Republic also said they had shut down websites to apply a security patch to close the PHP loophole. Even Japanese Prime Minister Sanae Takaichi posted on social media to warn about the PHP risk.<\/p>\n

The pair of vulnerabilities, dubbed PHP2Shell, were discovered <\/a>by cybersecurity experts with the help of artificial intelligence (AI) models.<\/p>\n

Researchers at security firm Calif, working with the tech company OpenAI, reported the first flaw on August 11. Wiz, a security firm owned by another tech giant, Alphabet, reported the second vulnerability on August \u206024.<\/p>\n

Wiz said the findings \u201crank among the most severe vulnerabilities discovered in PHP, and arguably in software history\u201d.<\/p>\n

The underlying flaws had been present for decades, the firm said, but proving they were exploitable required a chain of steps \u201cat \u2060the edge of what human researchers could practically achieve\u201d.<\/p>\n

AI tools allow researchers to find vulnerabilities in software by testing more attacks than they can with human programmers alone.<\/p>\n

The PHP programming language is maintained by the nonprofit PHP Foundation, which said on Wednesday that the flaws were some of the most severe it had encountered.<\/p>\n

The group urged anyone administering a website to update their code immediately.<\/p>\n

Both flaws rely on accessing parts of memory without proper authorisation and exploiting that access to run malicious code. The two loopholes mean an attacker can run commands on a server running old PHP code remotely over the internet, without needing a password or account to access the site legitimately.<\/p>\n

The PHP Foundation also warned that such security weaknesses would become easier to find with AI. It called on tech companies to mount a coordinated response to avoid major disruptions to online services.<\/p>\n

\u201cTools now find bugs faster than ever, for defenders and attackers alike, and the number of reports will keep growing,\u201d the foundation said in a statement<\/a>.<\/p>\n<\/div>\n\n

\n
\n \n
\n \n \"Happy\"\n <\/a>\n
\n Happy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sad\"\n <\/a>\n
\n Sad <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Excited\"\n <\/a>\n
\n Excited <\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Sleepy\"\n <\/a>\n
\n Sleepy <\/div>\n
\n 0<\/span>\n \n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n
\n \n \"Angry\"\n <\/a>\n
Angry<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n \n <\/div>\n <\/div>\n\n
\n \n \"Surprise\"\n <\/a>\n
Surprise<\/div>\n
\n 0<\/span>\n 0<\/span> %<\/span>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n\n ","protected":false},"excerpt":{"rendered":"

Artificial intelligence was used to pinpoint two vulnerabilities in the PHP programming language, used by more than 70 percent of websites. Published On 22 Oct 202622 Oct 2026 Authorities in Europe, Asia and other continents have temporarily taken some government websites offline to protect against newly discovered security vulnerabilities in a programming language used to…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_2277560469115098_106292521332774":"","twitter_aToxNzczMzI3Njk4OTg4ODUxMjAxOw==_1773327698988851200":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","_monsterinsights_skip_tracking":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"categories":[11],"tags":[],"class_list":["post-10520","post","type-post","status-publish","format-standard","category-international-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t