PHP is in the foundation of 70% of websites – here's what it is and why a flaw in the software is a major hacking threat

Governments and organizations around the world began scrambling on Oct. 21, 2026, to fix a vulnerability in software that ...
The Hacker News

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a ...
Built In

PHP Has Powered the Web for Decades — Now It’s at the Center of a Major Security Crisis

PHP is a programming language tailored for web development, and it now supports nearly 70 percent of the world’s websites. We ...

Critical PHP web security flaws spark global alarm as Google, OpenAI and Amazon respond

Critical PHP security flaws trigger global warnings as Google, OpenAI and Amazon respond to potential cyber threats.

Websites across world hit by millions of attempts to exploit PHP code flaw

Problem in PHP language that underpins 70% of websites has led governments and companies to pull sites offline while they patch fault ...

Neat Statement – October 2026: Critical PHP Remote Code Execution Vulnerabilities (PHP2Shell)

Note: This is a partially modified and supplemented translation of the original Neat support page document (Neat Statement – ...

PHP Exploded: The Day the Internet Pulled the Plug, Don't Trust 'Bug-Free' Code

A few days ago, a critical vulnerability in PHP threw the entire internet into chaos. Even high-ranking government officials ...
BleepingComputer

PHP's Git server hacked to add backdoors to PHP source code

In the latest software supply chain attack, the official PHP Git repository was hacked and the code base tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository ...