A critical flaw affecting 70% of all websites has the cybersecurity world panicked
Laurent H. — CEO & Founder CYBERR & HEELR
A critical flaw affecting 70% of all websites has the cybersecurity world panicked
Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take over and compromise millions of websites and the information held on their servers. In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.
The Australian Signals Directorate, America’s Cyber Defence Agency, and similar bodies from the United Kingdom, Europe and Japan have all warned web developers to apply urgent updates to their core systems, and to consider taking down websites until safety can be guaranteed.
The organisation behind the free, open-source language has published updates that patch the flaw, but performing the updates on the millions of systems that use PHP will take time.
What is PHP?
PHP is often called “the backbone of the web”. It’s a programming language – a way to give instructions to computers – that has been around since 1997, and it allows websites to manage user inputs and process information behind the scenes.
The power of PHP is its versatility. Websites use it for everything from logging users into accounts and running online stores, to requesting data from databases and powering millions of blog posts and news sites.
PHP runs on the server rather than your personal computer. This means most of us interact with PHP every single day without ever seeing it.
https://theconversation.com/a-critical-flaw-affecting-70-of-all-websites-has-the-cybersecurity-world-panicked-294941
12 reactions · 2 comments
Comments
Schomer: Spot on, Laurent. The panic we are seeing across European operations and global agencies highlights the fatal flaw of the modern web: implicit trust at the application layers. When a core runtime like the PHP engine handles user inputs, chasing a endless cycle of reactive patching is a losing game—especially as automated AI orchestration now compresses deployment timelines for new exploits into me
SHERIF E.: While PHP vulnerabilities can have a significant impact due to the language’s widespread use, claims of a flaw affecting 70% of websites and prompting governments to take systems offline should be verified against official advisories and technical disclosures. The actual risk depends on the specific vulnerability, affected PHP versions, and deployment configurations. Organizations should prioritiz