The maintainers of the PHP programming language today released patches for two critical vulnerabilities that affect up to 70% of the world’s websites. Several cybersecurity agencies including the NSA ...

Two critical PHP vulnerabilities could let hackers execute malicious code on web servers, prompting emergency patches and urgent warnings.

Critical PHP flaws forced European government websites offline. Learn which PHP versions need patches and what IT teams should do.

Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.

The National Security Agency (NSA) warned organizations Wednesday to immediately patch a pair of security flaws or take their ...

Researchers used OpenAI models to find severe faults in software used on majority of websites around the world ...

PHP may not be a household name, but the programming language, released over 30 years ago, powers a large share of websites and web applications. Nearly 70% of the internet is estimated to use PHP, ...

Two serious flaws in software that powers a large share of the web leaked ahead of their fix. Now attacks have reportedly ...

Governments in Finland and the Netherlands have taken several public websites offline. This comes after cybersecurity agencies warned of two critical vulnerabil ...

The U.S. National Security Agency’s sent out an alarming warning on Wednesday that two critical holes had been found in PHP, with patches already issued by the PHP Foundation. PHP is a server-side ...

PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution on PHP servers; patch to 8.2.35 or later now.