FBI issues guidance and minister rules out Budget security breach after critical PHP flaw forces websites worldwide offline
Computer hackers, as Cloudflare CEO Matthew Prince warned attackers were already probing the PHP vulnerability in the ten hours before its public disclosure, with around 70% of websites thought to be affected.
Amazon Web Services says the flaw is 'now being broadly exploited in the wild', prompting the FBI to issue fresh advice to organisations. Cloudflare boss Matthew Prince said thousands of exploit attempts in the 10 hours before disclosure jumped to tens of thousands within 45 minutes of it. Scotland Secretary Douglas Alexander insists there is 'no indication whatsoever' of a breach after the Office for Budget Responsibility pulled its website days before the Budget.
Oxford City Council and the City of Edinburgh Council both switched their websites off.
OpenAI's GPT-5.6 Sol found the flaws under its 'Patch the Planet' initiative.
Wiz researchers ranked them among the worst 'arguably in software history'.