Critical flaw in PHP prompts governments to warn website owners
An explainer on The Conversation says a critical flaw in PHP, the language behind more than 70% of websites, could let attackers take over sites. The PHP developers have released patches, but updating millions of systems will take time.
The article says researchers at the company Wiz used Google's Gemini and OpenAI's ChatGPT to search PHP's code in August. They found ways to break into systems built on Drupal and WordPress. A leak on Hacker News forced the PHP developers to release emergency patches on 21 October. Australian, American, British, European and Japanese agencies warned developers to update, and the Port of Rotterdam took websites offline. This is a fresh, fast-moving story, and the text names no CVE or affected versions.