Hacking attempts rise after PHP flaws found; some sites still offline
Hacking attempts have risen after two critical flaws were found in PHP, a language used by most websites, and some government and business sites remain offline while a patch is applied.
Hacking attempts have gone up since two critical flaws were found in PHP, a widely used programming language, NPR reports. Governments around the world are rushing to put safety measures in place. NPR says the vulnerabilities are "severe" and affect 70 percent of websites. Al Jazeera also puts PHP use at more than 70 percent of websites.
Some sites remain offline. The New York Times reports that governments and businesses in Kenya, the Netherlands and other countries were scrambling to keep hackers from exploiting the flaw. CNBC says European government sites were among those that went dark.
PHP developers published an advisory on Tuesday about the two flaws, The Verge reports. France 24 says PHP programmers released a patch on Wednesday. CNBC also says a fix was deployed. NBC News reports that global authorities recommended sites go offline temporarily until the fix was in place.
Al Jazeera reports that AI was used to find the vulnerabilities. France 24 says cybersecurity firms used AI to do it. CNBC says servers running PHP were exposed and millions of websites have data at risk. The New York Times says the disclosure raised concerns about AI's potential to upend cybersecurity unless its shortcomings are addressed.
Reported by
- The VergeA critical programming vulnerability may take websites down todayWed, Oct 21, 7:49 AM EDT
- BBC NewsCyber chiefs tell websites to make critical safety update or go offlineWed, Oct 21, 8:09 AM EDT
- NBC NewsCritical vulnerabilities in commonly used web code spark rush to update systemsWed, Oct 21, 9:06 AM EDT
- CNBCGovernment websites in Europe and elsewhere go dark as software flaw sparks security scrambleWed, Oct 21, 12:17 PM EDT
- France 24Websites go dark as AI exposes critical security flawsWed, Oct 21, 1:15 PM EDT
- France 24Government and corporate websites go dark as AI exposes critical security flawsWed, Oct 21, 1:15 PM EDT
- The New York TimesA.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many WebsitesWed, Oct 21, 3:04 PM EDT
- Al JazeeraWorld leaders warn against security flaw found in PHP computer programmingWed, Oct 21, 8:10 PM EDT
- The New York TimesGlobal Rush to Fix PHP Security Flaw Leaves Some Websites OfflineThu, Oct 22, 7:48 AM EDT
- CNBCWhy governments pulled websites offline over a decades-old programming languageThu, Oct 22, 8:00 AM EDT
- The New York TimesWhat Is PHP? Why Are Government and Business Websites Going Offline?Thu, Oct 22, 11:55 AM EDT
- BBC NewsRace to update services' computer systems after cyber-security flaw foundThu, Oct 22, 1:12 PM EDT
- NPRHacking attempts rise after flaws found in program affecting 70 percent of websitesFri, Oct 23, 5:37 AM EDT
This story was written by AI using only the reports listed above, and published without a person reviewing it first. It is rewritten as new reports arrive. Read the original reporting for full detail. Spot an error? Tell us.
Earlier versions (7)
- Thu, Oct 22, 12:00 PM EDT, 7 outlets: Some websites stay offline as governments and firms rush to apply PHP fix
- Thu, Oct 22, 6:05 AM EDT, 7 outlets: PHP patch released after AI-found flaws force websites offline worldwide
- Thu, Oct 22, 1:55 AM EDT, 6 outlets: Websites shut down worldwide over two PHP flaws found by AI; fix released
- Wed, Oct 21, 8:20 PM EDT, 5 outlets: AI found two critical PHP flaws; some government sites went offline
- Wed, Oct 21, 12:30 PM EDT, 4 outlets: Government sites in Europe go offline over PHP flaws; fix deployed
- Wed, Oct 21, 9:15 AM EDT, 3 outlets: Global authorities urge sites to go offline until PHP flaws are patched
- Wed, Oct 21, 8:10 AM EDT, 2 outlets: PHP developers to release fixes for two critical vulnerabilities