Two critical PHP vulnerabilities, rated 9.2/10, could affect 70% of websites globally. Patches were due Wednesday, but exploitation attempts are already underway.
01Summary
- 01The PHP vulnerabilities were rated 9.2 out of 10 in severity by monitoring agencies.
- 02Up to 70% of global websites could be affected, according to the Wall Street Journal.
- 03The US National Security Agency and UK National Cyber Security Centre urged administrators to patch or take sites offline.
- 04Cloudflare deployed a fix to its firewall; watchTowr confirmed in-the-wild exploitation attempts.
- 05The flaws were discovered by hacker team Calif using OpenAI's GPT-5.6 Sol model, and independently by Wiz.
02Why it matters
If you run or use websites built on PHP, your data and service availability could be at immediate risk. Exploitation is already active, and patches must be applied urgently to prevent hacks.
Pulse AIAsk about this story
Answers are generated by AI from the story summary; they are not investment, health or legal advice.
