Critical PHP Flaw Threatens Security Across the Internet

A severe flaw in the PHP programming language is putting a vast portion of the global internet at risk. The issue allows attackers to execute malicious code, alter page content, or extract private information stored in databases.

Language developers released urgent patches following the discovery of two critical vulnerabilities. PHP powers servers hosting everything from government portals to online stores and personal blogs. The flaw has existed in the source code for more than a decade.

Cybersecurity experts note that the errors occur in how the system processes fatal failures like memory exhaustion. Successful attacks can result in the theft of passwords and credentials stored in server memory. The severity of these issues was rated 9.2 out of 10.

These vulnerabilities were identified with the help of artificial intelligence by industry firms. Details about the problems leaked online before official patches were available. Security teams have already detected attempts by malicious actors to exploit these gaps.

The use of such a widespread foundational technology expands the risk to various connected devices. Updating systems immediately is recommended to prevent the exposure of sensitive data and the disruption of critical digital services.