The Newshound

Websites go dark after FBI and UK cyber chiefs urged owners to patch an AI-found PHP flaw or shut down

Computer hackers, as Cloudflare CEO Matthew Prince warned attackers were already probing the PHP vulnerability in the ten hours before its public disclosure, with around 70% of websites thought to be affected.
Computer hackers, as Cloudflare CEO Matthew Prince warned attackers were already probing the PHP vulnerability in the ten hours before its public disclosure, with around 70% of websites thought to be affected.

Amazon Web Services says the flaw, dubbed 'PHP2Shell', is now 'being broadly exploited in the wild'. Cloudflare boss Matthew Prince said exploit attempts jumped to tens of thousands within 45 minutes of the announcement. The Office for Budget Responsibility, Oxford City Council and City of Edinburgh Council pulled their sites. Minister Douglas Alexander insists next week's Budget is secure.

PHP underpins almost 70% of websites, including WordPress and Magento, according to Cloudflare.

The fix was meant to stay secret until sites had patched, but it leaked.

Wiz researchers call it arguably among the most severe flaws 'in software history'.

MoreCity A.M.PHP cyber threat rocks internet as government and companies scramble to fend off attacksAPRush is on to patch AI-discovered software vulnerability that could impact 70% of websites worldwideLBC'The most severe flaw in software history': Hundreds of major websites shut down as experts warn of criminal hacks over critical cyber-security flawBBC News - TechZoe Kleinman: PHP is the cyber equivalent of an unexploded bombGB NewsWebsites go offline after AI uncovers critical flaw in PHP code that powers up to 70% of sites worldwideNewsweekFBI issues advice as security issue hits global websitesThe IndependentNo breach of Budget security after critical flaw found in PHP, minister saysThe TelegraphPHP: Websites close as owners scramble to fix cybersecurity flawsThe SunFears of 'wider wave of cyber attacks' after 'critical' PHP software flaw found by AI sparks global shutdown of websitesLBCWebsites around the world taken offline after AI finds ‘critical’ security flawReutersChinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft saysUPI'Severe' vulnerability in common website code triggers global alarm
Read today's full feed at The Newshound →