Governments and companies worldwide rushed on Thursday to patch critical flaws in PHP, the programming language that underpins much of the internet. The vulnerabilities reportedly sat undetected in the software for years before being uncovered using AI. PHP developers released fixes on Wednesday and urged users to “update immediately”.
According to Cloudflare CEO Matthew Prince, exploit attempts jumped from thousands before the announcement to tens of thousands within 45 minutes, and millions within hours. Aikido Security said details of the flaws became public before fixes were ready.
Banking, airline, rail, tax and government services from Tokyo to Helsinki went offline as a precaution. In Japan, Nomura, MUFG, ANA, East Japan Railway and the National Tax Agency suspended some online services. France’s Orange did the same across several subsidiaries. Finland’s state IT provider Valtori said its outages were precautionary and not caused by a breach. South Korea raised its private-sector cyber alert level, and China’s industry ministry urged system inspections. Microsoft CEO Satya Nadella said he had “not seen anything like this in a long, long time.”
Source: Reuters
So What
The bigger story is likely the AI angle. AI found flaws humans missed for years, and attackers can reportedly use the same tools to exploit them fast. That shrinks the gap between disclosure and attack to hours. It is still unclear whether any major breach has occurred. Large operators will probably patch quickly. The highest risk likely sits with smaller organisations running old, unmonitored PHP sites, which could stay exposed for weeks.
Follow us to join the intelligence community!