By Jenny Lee
Publication Date: 2026-10-22 01:05:00
The tech world is racing to implement fixes after the discovery of critical security vulnerabilities in software used to power much of the internet.
The software, known as PHP, is an open-source programming language widely used to power websites and web applications. The discovery of the flaws prompted urgent warnings from governments worldwide, while tech giants including Google, OpenAI and Amazon have been involved in efforts to uncover the vulnerabilities, detect potential attacks and protect affected systems.
The two vulnerabilities, collectively known as “PHP2Shell,” could allow hackers to remotely execute malicious code on affected servers, potentially exposing sensitive data, according to cybersecurity researchers. While not every website using PHP is necessarily vulnerable, the software’s widespread use has raised concerns about the potential scale of attacks.
The U.S. National Security Agency on Wednesday urged organizations using PHP to prepare security updates addressing…
