A major security vulnerability affecting PHP, the backbone of over 70% of global websites including many in India, was recently exposing millions of sites to unauthorized remote control. The discovery, aided by artificial intelligence, spurred immediate warnings and patching efforts led by the PHP Foundation and cybersecurity agencies.
- Over 70% of websites globally use PHP, amplifying vulnerability impact
- AI technology accelerated discovery and mitigation of critical flaws
- Several government and corporate websites remain offline during patching
What happened
The PHP Foundation and the FBI's cyber division publicly disclosed two critical vulnerabilities in PHP, a scripting language that powers the majority of websites around the world. These vulnerabilities could allow bad actors to gain unauthorized, remote control of web servers without a password, potentially enabling data theft or manipulation.
Following the announcement, security advisories urged PHP users to urgently apply fixes or temporarily shut down their websites. Several government websites in countries including India were taken offline to protect sensitive data and services. The vulnerabilities had reportedly been known since at least 2024, but fixing them proved difficult due to technical and resource constraints.
Why it matters
PHP’s widespread use—around 70% of websites globally runs on it—means that this security flaw could affect a staggering number of sites, including critical government and enterprise systems. The open-source and free nature of PHP, while contributing to its popularity, also complicates coordinated vulnerability management and patching efforts across diverse users and organizations.
The incident underscores the growing role of artificial intelligence in cybersecurity, illustrating both the benefits of AI-accelerated vulnerability discovery and the risks, as attackers also leverage AI to exploit weaknesses faster. The PHP Foundation acknowledged a delay in fixing the issue, citing structural challenges, highlighting the importance of proactive investment in security resources and processes.
What to watch next
Security researchers expect this to be just the beginning of ongoing disruptions as attackers probe the internet for remaining vulnerable servers and organizations struggle to test and deploy patches comprehensively. Continued monitoring of government and corporate websites will be essential to assess the long-term impact and effectiveness of remediation efforts.
Further developments may include improvements in coordination among open-source maintainers, adoption of AI tools for faster vulnerability detection, and enhanced cybersecurity policies to address resource gaps that delayed resolution. For India, with significant government and enterprise reliance on PHP, this event could accelerate modernization and security investment initiatives.