Critical Security Vulnerabilities Detected in PHP Software Affecting 70 Percent of Websites

Serdar HocamAuthor & Editor

Critical security vulnerabilities discovered in the PHP language, used by a large portion of websites worldwide, have triggered a global cybersecurity alarm. Systems are undergoing urgent updates due to the flaws that allow unauthenticated remote access.

◉ 2 views
PHP internet warning latest: 'Staggering' flaws found in software used by 70% of websites - as global alert issued

Critical security vulnerabilities that went unnoticed for years by artificial intelligence agents have been identified in the PHP programming language, which forms the infrastructure of approximately 70 percent of internet sites. It has been reported that the flaw, which has a severity rating of 9.2 out of 10, is being widely abused worldwide and millions of cyber attack attempts are taking place every minute.

Cybersecurity experts and tech giants such as Amazon Web Services and Cloudflare have confirmed that the security vulnerability in question is being actively exploited. Cloudflare officials reported recording millions of unauthorized access attempts per minute targeting systems. The vulnerability involves two main technical risks: memory corruption and improper sanitization of user data. This situation allows attackers to gain unauthorized remote access to systems without needing any password.

Public institutions and private sector representatives have been urged to take urgent measures against the flaw, which has been described by OpenAI as one of the most impactful security issues of recent times. Noting that legacy systems such as healthcare sector infrastructures are also at risk, authorities emphasize that developers must apply the released free security patches without wasting any time.

Sources

  • news.sky.com · Link