A critical vulnerability has been discovered in PHP, the scripting language that powers over **70%** of websites globally. Emergency patches have been released, and governments are urging developers to update systems immediately.
Over 70%
Websites Affected
⏳ Time Machine
How today’s news fits into the bigger picture
1994
PHP Released
Rasmus Lerdorf released the first version of PHP (then 'Personal Home Page Tools'), which quickly gained popularity due to its simplicity and effectiveness for web development, laying the foundation for its widespread use.
Early 2000s
PHP Dominates Web Development
PHP became one of the most widely used server-side scripting languages, powering a vast number of websites and web applications, including early versions of Facebook and WordPress, establishing its critical role in the internet's infrastructure.
2015
PHP 7 Released, Major Performance Boost
PHP 7 was a significant release that brought substantial performance improvements and new language features, leading to further adoption and cementing its status as a robust platform for modern web development, while also improving security.
December 2021
Log4Shell Vulnerability Causes Global Panic
The discovery of the Log4Shell vulnerability in the widely used Log4j library demonstrated how a critical flaw in a foundational software component could affect a massive portion of the internet, leading to a global scramble for patches and highlighting supply chain risks.
Last 12 months
Increased Sophistication of Cyberattacks
Recent trends have shown a marked increase in the sophistication and frequency of cyberattacks, including ransomware and supply chain attacks, putting immense pressure on software developers and IT security teams to identify and address vulnerabilities rapidly.
Today
A critical cybersecurity vulnerability was discovered in PHP, affecting over 70% of websites, prompting emergency patches.
What happens next?
Website administrators and developers are expected to apply the emergency PHP patches immediately, with cybersecurity firms closely monitoring for exploitation attempts.
Cybersecurity experts are in a panic over a newly discovered critical flaw in PHP, the programming language underpinning more than **70%** of all websites on the internet. This severe vulnerability, if exploited, could allow attackers to gain unauthorized control over affected websites, leading to data breaches, website defacement, or service disruption. Emergency patches have already been released by the PHP development team to address the issue. Governments and cybersecurity agencies worldwide are issuing urgent warnings to web administrators and developers, stressing the importance of immediately applying these patches to prevent widespread exploitation. Failure to update promptly could leave a vast number of websites, from small blogs to large enterprise platforms, exposed to significant security risks.
💭 If you're wondering…
Remote Code Execution (RCE) is a cybersecurity vulnerability that allows an attacker to run arbitrary code on a target computer or server from a remote location. This can give the attacker full control over the affected system.
Did this story help?
Official sources
Knowledge Chain — tap a concept