SignalPost

← Stories

PHP Releases Emergency Patches for Two Critical Flaws, Sites Go Offline

On October 21, 2026, the PHP project released emergency security updates fixing two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619, dubbed PHP2Shell) that were found with help from OpenAI models, prompting governments and companies worldwide to take websites offline while they applied the patches.

93newsrooms
235articles
5.5 daysrunning
Oct 20first seen

Ask Scout

Scout answers questions about this story using only the coverage below.

Coverage over time

Oct 20 1 PM: 86 articlesOct 21 1 PM: 98 articlesOct 22 1 PM: 46 articlesOct 23 1 PM: 2 articlesOct 24 1 PM: 2 articlesOct 25 1 PM: 1 articleOct 20 1 PMOct 26 2 AMpeak 98 per day

Articles

Oct 26, 2:38 AM theregister.com PHP2Shell is a warning shot for vulnerability disclosure
Oct 24, 6:33 PM japantimes.co.jp ‘Tech debt coming due’: AI-found flaw signals chaos ahead
Oct 24, 4:05 PM bbc.com The PHP developer who became the unsung hero of the internet
Oct 24, 4:42 AM npr.org AI found the flaw. Hackers found the leak: The race to save 'PHP2SHELL'
Oct 23, 11:35 PM techmeme.com A look at OpenAI's Project Daybreak, which lets vetted partners use its top hacking models to find and fix vulnerabilities and helped uncover PHP2Shell RCE bugs (Thomas Brewster/Forbes)
Oct 23, 1:36 PM fortune.com How an OpenAI model exposed a flaw in 70% of the internet’s websites
Oct 23, 1:28 PM time.com The AI-Discovered Bug That Could Have Become a Cybersecurity Disaster
Oct 23, 1:25 PM bloomberg.com AI Ushers in New Era of Cybersecurity Needs
Oct 23, 12:41 PM darkreading.com Exposed to PHP2Shell? Cyber Experts Weigh in With Advice
Oct 23, 12:04 PM inc.com This Historic Cybersecurity Flaw Put 70 Percent of Websites at Risk. Patch Yours Today If You Haven’t Yet
Oct 23, 11:48 AM theguardian.com ‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking
Oct 23, 11:24 AM businessinsider.com I woke up to panicked text messages about the PHP attacks. As a cybersecurity expert, here are the 3 things I tell people to do right away.
Oct 23, 10:43 AM theconversation.com PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat
Oct 23, 10:21 AM gpb.org Hacking attempts rise after flaws found in program affecting 70% of websites
Oct 23, 10:18 AM cbsnews.com PHP bug "about as bad as it can get," cybersecurity reporter says
Oct 23, 9:40 AM semafor.com Human complacency creates the AI age's biggest problems
Oct 23, 9:15 AM techradar.com PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet
Oct 23, 8:57 AM bloomberg.com Why AI Is Causing a Global Panic Over Cybersecurity
Oct 23, 8:39 AM reuters.com Focus: AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
Oct 23, 8:38 AM bleepingcomputer.com PHP shares mitigation for new RCE vulnerability with no patch
Oct 23, 8:18 AM cnbc.com AI's 'Black October': Critical PHP flaws set off global security scramble
Oct 23, 8:09 AM zdnet.com PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
Oct 23, 7:05 AM techradar.com AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts
Oct 23, 6:51 AM theweek.com How can we stop the internet collapsing?
Oct 23, 6:35 AM bloomberg.com AI Ushers In Era of Rapid-Fire Software Vulnerabilities
Oct 23, 6:28 AM thenextweb.com Cloudflare sees millions of attempts to exploit critical PHP flaws
Oct 23, 5:45 AM securityweek.com Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Oct 23, 5:00 AM bbc.co.uk 'It's been relentless' say IT workers on frontline of PHP cyber-security scramble
Oct 23, 4:25 AM thehackernews.com URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Oct 23, 4:24 AM qz.com AI-discovered PHP security flaws prompt global scramble to patch websites
Oct 23, 4:15 AM tomshardware.com Devastated forum user who accidentally broke the PHP news embargo comes clean
Oct 23, 3:26 AM straitstimes.com AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
Oct 23, 2:55 AM businessinsider.com I'm a CTO who was awake for 48 hours because of the PHP crisis. October feels like the month of hell for tech.
Oct 23, 2:37 AM npr.org Hacking attempts rise after flaws found in program affecting 70 percent of websites
Oct 23, 2:00 AM businessinsider.com Should we panic and turn off the internet?
Oct 23, 1:35 AM thehackernews.com Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
Oct 23, 1:28 AM thenextweb.com Japan to set up AI hacker team as PHP flaws knock services offline
Oct 23, 12:40 AM thehackernews.com PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Oct 22, 10:15 PM reuters.com Japan to simulate cyberattacks as PHP flaws roil global internet
Oct 22, 9:00 PM therecord.media Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits
Oct 22, 8:08 PM cbsnews.com Companies, governments race hackers to patch internet security flaws
Oct 22, 7:06 PM bloomberg.com FailSafe President on AI hacking, Cybersecurity
Oct 22, 5:47 PM platformer.news Introducing Machine Gods
Oct 22, 5:30 PM techmeme.com An interview with Ondřej Surý, a volunteer who maintains PHP and automates its patches, about his role in fixing two critical PHP security vulnerabilities (Charlie Warzel/The Atlantic)
Oct 22, 5:17 PM thestreet.com Amazon caught hackers probing a PHP flaw 4 days before the fix
Oct 22, 4:47 PM theatlantic.com The Man Who Saved the Internet Yesterday
Oct 22, 4:00 PM straitstimes.com Use MFA, patch, beware of scammers: 5 ways to keep safe online in the wake of AI-supercharged hacking
Oct 22, 3:21 PM decrypt.co Is the Internet Safe Again After the PHP Nightmare? What You Need to Know
Oct 22, 3:07 PM nbcnews.com Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis
Oct 22, 3:07 PM cbsnews.com AI-discovered security flaws trigger global website shutdowns
Oct 22, 2:13 PM businessinsider.com Here's how to protect your information from the PHP flaw, according to cybersecurity pros
Oct 22, 1:46 PM phillytrib.com What to know about the AI-detected security bug impacting wide swaths of the internet
Oct 22, 1:37 PM theregister.com PHP2Shell exploit bypasses protections designed to stop remote code execution
Oct 22, 11:37 AM fortune.com The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in
Oct 22, 11:21 AM breitbart.com Tech Explainer: What You Need to Know About the PHP Flaw Threatening the Internet
Oct 22, 11:01 AM axios.com Black October: why bugs discovered by OpenAI tech are creating a cyber emergency
Oct 22, 10:43 AM bloomberg.com OpenAI Helped Find Potentially Catastrophic Cyber Flaw
Oct 22, 10:30 AM theguardian.com The Guardian view on AI safety: the push for global regulation must advance | Editorial
Oct 22, 10:12 AM bbc.co.uk Race to update services' computer systems after cyber-security flaw found
Oct 22, 10:10 AM theglobeandmail.com What is PHP? The AI-detected bug prompting a global security scramble
Oct 22, 10:02 AM abcnews.com What to know about the AI-detected security hole impacting wide swaths of the internet
Oct 22, 9:51 AM cbsnews.com Expert explains the PHP bug that could take down 70% of the internet
Oct 22, 9:49 AM theverge.com The disastrous PHP vulnerabilities were exploited days before the patch
Oct 22, 9:30 AM kotaku.com The Internet Is Currently On Fire
Oct 22, 9:05 AM theregister.com PHP2Shell puts dozens of UK government services out of service
Oct 22, 8:55 AM nytimes.com What Is PHP? Why Are Government and Business Websites Going Offline?
Oct 22, 8:52 AM appleinsider.com Critical PHP vulnerabilities threaten your NAS, not every vendor has a fix
Oct 22, 8:34 AM 10news.com Websites shut down globally after AI finds flaw affecting 70% of the internet
Oct 22, 8:25 AM arstechnica.com Hackers got a four-day head start on epic PHP2Shell vulnerability
Oct 22, 8:15 AM techmeme.com Cloudflare's Matthew Prince says PHP2Shell exploit attempts on its network rose from thousands in the 10 hours before the disclosure to millions afterward (Matthew Prince/@eastdakota)
Oct 22, 8:13 AM whdh.com Rush is on to patch a software vulnerability that could impact 70% of websites worldwide
Oct 22, 8:12 AM theverge.com PHP: The three little letters wreaking havoc across the web
Oct 22, 8:11 AM cbsnews.com What to know about the PHP bug affecting 70% of world's websites
Oct 22, 7:40 AM bloomberg.com PHP Cybersecurity Flaws: How AI Uncovered Software Vulnerabilities
Oct 22, 7:23 AM 404media.co AI Is Changing Everything About Hacking. No One Knows What Happens Next
Oct 22, 7:22 AM abc.net.au Hacking attempts surge as websites race to patch PHP issues
Oct 22, 6:58 AM scmp.com Singapore pushes for quick action on PHP security flaws as hackers prowl
Oct 22, 6:42 AM bbc.com ⁠Scale of cyber-security flaw 'unprecedented' but no sign of breaches, says expert
Oct 22, 6:38 AM abcnews.com Rush is on to patch AI-discovered software vulnerability that could impact 70% of websites worldwide
Oct 22, 6:09 AM bleepingcomputer.com Amazon says PHP2Shell exploitation began 4 days before patches
Oct 22, 6:03 AM thenextweb.com Millions of PHP2Shell attempts so far, but officials see no break-in
Oct 22, 5:51 AM pbs.org AI discovered a software vulnerability that could impact 70% of websites worldwide. The rush is on to patch it
Oct 22, 5:40 AM theguardian.com Websites across world hit by millions of attempts to exploit PHP code flaw
Oct 22, 5:37 AM aljazeera.com What’s the PHP coding flaw that could pull down 70 percent of the internet?
Oct 22, 5:31 AM kotaku.com Two Of Japan’s Oldest Mobile Games Have Been Forced Permanently Offline Because Of The New Exploit Ravaging The Web
Oct 22, 5:26 AM techradar.com No, the internet isn't dying due to 'one of the most significant vulnerabilities of 2026' - but this is what you need to know
Oct 22, 5:21 AM semafor.com Web developers raise alarm bells over AI-driven cyberattacks
Oct 22, 5:20 AM securityweek.com Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Oct 22, 5:17 AM bbc.co.uk How did AI discover the internet's massive cyber-security risk?
Oct 22, 5:15 AM theregister.com Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Oct 22, 5:10 AM 9to5mac.com What’s going on with the web? The PHP issue and sites going offline
Oct 22, 5:06 AM euronews.com PHP security flaw: Why websites across Europe went dark and what it means for you
Oct 22, 5:00 AM cnbc.com Why governments pulled websites offline over a decades-old programming language
Oct 22, 4:58 AM techradar.com Which big websites have been hit by the PHP crisis? Here’s the list so far
Oct 22, 4:48 AM nytimes.com Global Rush to Fix Security Flaw Uncovered by A.I. Leaves Sites Offline
Oct 22, 4:48 AM nytimes.com Global Rush to Fix PHP Security Flaw Leaves Some Websites Offline
Oct 22, 4:29 AM abc7ny.com PHP vulnerability 2026: Websites shut down globally as operators address AI-detected flaw in web programming language
Oct 22, 4:26 AM straitstimes.com Governments, companies take websites offline over PHP flaws
Oct 22, 4:07 AM tomsguide.com ‘Babe, wake up, the internet is collapsing’: Two massive flaws just broke the web, and the data of billions is in the crossfire
Oct 22, 4:04 AM theglobeandmail.com Millions of hacking attempts as companies and governments rush to fix programming flaw
Oct 22, 3:43 AM bloomberg.com Researchers Say Hackers Targeted PHP Before Flaws Were Known
Oct 22, 3:30 AM tomshardware.com OpenAI says ChatGPT Sol helped uncover critical PHP flaws that could affect 70% of websites
Oct 22, 3:17 AM newscientist.com Global race to update computers as AI discovers most disruptive hack yet
Oct 22, 3:17 AM bbc.co.uk Zoe Kleinman: PHP is the cyber equivalent of an unexploded bomb
Oct 22, 3:12 AM searchenginejournal.com Critical PHP Core Security Flaws Affect Websites, Including WordPress
Oct 22, 3:08 AM bbc.co.uk '500 new vulnerabilities' found in government, says AI minister
Oct 22, 2:48 AM securityweek.com PHP2Shell Exploitation Started Days Before Patches
Oct 22, 2:06 AM straitstimes.com Websites go dark worldwide as AI uncovers flaws in code powering much of the internet
Oct 22, 2:06 AM cointelegraph.com PHP flaw draws millions of exploit attempts, Cloudflare CEO warns
Oct 22, 2:05 AM techradar.com PHP issues affect websites across the world — all the latest updates, and what you need to know
Oct 22, 1:58 AM techradar.com PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers
Oct 22, 1:47 AM euronews.com Websites go dark after AI exposes major programming language security flaw
Oct 22, 1:42 AM newsweek.com FBI Issues Advice As Security Issue Hits Global Websites
Oct 22, 1:40 AM dw.com Germany news: Many sites back online after PHP security fix
Oct 22, 1:13 AM yahoo.com Websites worldwide go dark after AI discovers major security flaws
Oct 21, 11:37 PM scmp.com Hong Kong watchdog warns of hacking risks from flaws in web programming language
Oct 21, 11:34 PM thehackernews.com Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Oct 21, 11:26 PM japantimes.co.jp Bank, business and ministry websites halted after PHP vulnerabilities announced
Oct 21, 11:10 PM bloomberg.com Japan Scrambles to Patch PHP Flaws as Banks, Airlines Go Offline
Oct 21, 9:46 PM straitstimes.com Cloudflare sees millions of exploit attempts after PHP disclosure
Oct 21, 9:38 PM bbc.co.uk UK working to identify exposure after global cyber-security warning
Oct 21, 9:28 PM ft.com Websites taken offline in race to patch PHP security flaw
Oct 21, 9:17 PM france24.com 'Backbone of the web': What is PHP and how has it raised AI hacking fears?
Oct 21, 8:48 PM bbc.co.uk What is PHP and why did it spark a global cyber security scramble?
Oct 21, 8:41 PM cbsnews.com AI finds problematic internet bug that could allow hackers to retrieve sensitive information
Oct 21, 8:30 PM cbsnews.com Cyber experts use AI to uncover website security flaw
Oct 21, 7:50 PM techmeme.com AWS analysts claim that at least one actor started to exploit the PHP2Shell bugs on October 17, four days prior to the vulnerabilities' public disclosure (Lily Hay Newman/Wired)
Oct 21, 7:24 PM wired.com Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Oct 21, 7:00 PM news.sky.com Disruption from 'critical' flaw in websites could spread in coming days, experts warn
Oct 21, 6:05 PM cnbc.com Critical web security flaws spark global alarm as Google, OpenAI and Amazon respond
Oct 21, 6:00 PM cascadepbs.org News Wrap: Vulnerability prompts race to protect websites
Oct 21, 5:48 PM abc.net.au Australians facing spike in data breaches after 'critical' flaw uncovered
Oct 21, 5:45 PM cbsnews.com The story behind the bug threatening up to 70% of the internet
Oct 21, 5:44 PM cointelegraph.com PHP Foundation admits ‘structural failure’ delayed critical security fix
Oct 21, 5:39 PM theguardian.com Flaw in PHP computer language leads to shutdown of websites around world
Oct 21, 5:17 PM japantimes.co.jp Government websites go dark after AI-discovered flaw sparks security scramble
Oct 21, 5:10 PM aljazeera.com World leaders warn against security flaw found in PHP computer programming
Oct 21, 4:27 PM washingtonexaminer.com Up to 70% of world’s websites at risk after AI discovers critical security flaw
Oct 21, 4:04 PM pcworld.com AI helped uncover a security nightmare in the web’s backbone. Should you be worried?
Oct 21, 4:04 PM pcworld.com Why is everyone talking about PHP’s ‘critical’ security flaws?
Oct 21, 4:02 PM theregister.com PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
Oct 21, 4:02 PM 12news.com Massive security flaw detected in web programming language forces many websites offline
Oct 21, 3:44 PM semafor.com AI helps find vulnerability affecting up to 70% of websites
Oct 21, 3:10 PM scmp.com Websites go dark worldwide as AI exposes critical security flaws
Oct 21, 2:40 PM thehill.com Internet races to fend off newly discovered security flaws
Oct 21, 2:39 PM cbsnews.com AI discovers bug that puts up to 70% of websites at risk
Oct 21, 2:26 PM axios.com AI uncovers massive flaw in web's foundational code
Oct 21, 1:58 PM washingtontimes.com Government websites in Europe go offline as companies update software flaw
Oct 21, 1:56 PM engadget.com Government websites in the EU and Canada taken offline over PHP vulnerability
Oct 21, 1:54 PM motherjones.com AI Helped Find a Critical Bug Affecting Huge Swathes of the Internet
Oct 21, 1:36 PM theverge.com PHP: The three letters that shut down sites all over the internet today
Oct 21, 1:27 PM inquirer.com Websites scramble to fix software flaw that could put much of internet at risk
Oct 21, 12:45 PM ffxnow.com Fairfax City meetings go offline, as FBI warns of AI-detected vulnerabilities
Oct 21, 12:21 PM theatlantic.com The AI-Hacking Apocalypse Began Last Night
Oct 21, 12:19 PM darkreading.com 'PHP2Shell' Bugs Signal Red Alert for Security Industry
Oct 21, 12:03 PM newsweek.com Critical PHP Flaws Threaten Millions of Websites in New AI Security Test
Oct 21, 12:03 PM techcrunch.com The internet is having a very bad cybersecurity day
Oct 21, 11:48 AM nytimes.com A.I. Discovered a Critical Security Flaw Underpinning Websites
Oct 21, 11:48 AM fortune.com AI tools discovered the PHP vulnerability that could take down 70% of the Internet. Now the race is on to patch it before AI-powered hackers attack
Oct 21, 11:48 AM fortune.com AI helped discover the PHP vulnerability that could take down 70% of the internet
Oct 21, 11:46 AM ft.com NSA warns on ‘critical’ cyber vulnerabilities detected using AI
Oct 21, 11:46 AM decrypt.co Who Found the PHP Bug That Made Governments Unplug Their Websites? ChatGPT, Of Course
Oct 21, 11:45 AM thehill.com NSA warns organizations to patch security flaws identified by AI
Oct 21, 11:41 AM simonwillison.net Today's PHP Security Release, and How We're Strengthening PHP Security
Oct 21, 11:32 AM mashable.com PHP vulnerability: Which websites and services are affected?
Oct 21, 11:26 AM mashable.com OpenAI says GPT-5.6-Sol helped find the PHP flaws now shaking the internet
Oct 21, 11:06 AM nypost.com Major websites in US and Europe go dark as operators race to protect systems from hackers
Oct 21, 10:59 AM techcrunch.com PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
Oct 21, 10:50 AM bostonglobe.com Some websites go dark as operators address an AI-detected flaw in a common web programming language
Oct 21, 10:43 AM mynorthwest.com Some websites go dark as operators address an AI-detected flaw in a web programming language
Oct 21, 10:30 AM therecord.media PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
Oct 21, 10:16 AM rfi.fr Websites go dark as AI exposes critical security flaws worldwide
Oct 21, 10:15 AM france24.com Government and corporate websites go dark as AI exposes critical security flaws
Oct 21, 10:10 AM qz.com PHP releases patches for 2 critical flaws that AI helped researchers find
Oct 21, 10:07 AM lemonde.fr Websites worldwide go dark as AI exposes security flaws
Oct 21, 10:05 AM techmeme.com The PHP Foundation says its RCE patches are limited to PHP 8.2 and newer, leaving legacy deployments dependent on third-party vendors (Wired)
Oct 21, 10:03 AM abc7ny.com PHP code risk: Urgent security fix issued for code vital to estimated 70% of all websites
Oct 21, 10:00 AM developers.slashdot.org Government Websites Go Dark After Severe PHP Vulnerabilities Disclosed
Oct 21, 9:56 AM dw.com PHP developers say key patches available after global scare
Oct 21, 9:50 AM securityweek.com PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
Oct 21, 9:36 AM businessinsider.com A major security flaw found using an OpenAI model is causing internet chaos
Oct 21, 9:18 AM gizmodo.com ‘Expect Mass Attacks Within 15 Minutes’: Hackers Poised to Exploit Newly Discovered Website Flaws
Oct 21, 9:16 AM mashable.com PHP vulnerability: PHP security issues today explained
Oct 21, 9:16 AM abcnews.com Urgent security fix issued for code vital to estimated 70% of all websites
Oct 21, 9:11 AM mashable.com Internet Archive, Wikipedia outages: What we know
Oct 21, 9:07 AM bbc.com Websites taken down worldwide as critical cyber-security update issued
Oct 21, 9:07 AM reuters.com PHP developers issue updates to fix vulnerabilities, says flaw was found in 2024
Oct 21, 9:02 AM thenextweb.com PHP knew about one of the flaws in 2024 but could not agree a fix
Oct 21, 9:00 AM kotaku.com Multiple Pokémon Apps Taken Offline Over PHP Cyber Attack Fears
Oct 21, 8:58 AM abc.net.au Australia’s cybersecurity site among those hit by ‘critical’ software flaw
Oct 21, 8:51 AM straitstimes.com Explainer-What is PHP and why did it take government websites offline?
Oct 21, 8:48 AM thenextweb.com European governments pull websites offline over two critical PHP flaws
Oct 21, 8:36 AM techradar.com Website admins across the world bracing for impact following major PHP flaw reveal
Oct 21, 8:35 AM decrypt.co PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out
Oct 21, 8:35 AM techmeme.com The PHP Foundation details how it found and fixed the two flaws, and says it had to release patches a day early after the CVE IDs began circulating online (The PHP Foundation)
Oct 21, 8:26 AM krebsonsecurity.com Widespread PHP Flaw May Cause Many Site Outages Today
Oct 21, 8:25 AM techmeme.com Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws (Reuters)
Oct 21, 8:25 AM thenextweb.com PHP rushes out emergency patches for two critical bugs AI found first
Oct 21, 8:08 AM theregister.com PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched
Oct 21, 7:59 AM polygon.com The Entire Internet Is Officially In Crisis Mode Today
Oct 21, 7:51 AM straitstimes.com PHP developers issue new version to fix critical vulnerabilities
Oct 21, 7:51 AM theinformation.com AI Finds Flaw in Popular Web Hosting Software, Sparking Global Race to Patch
Oct 21, 7:49 AM inc.com 2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now
Oct 21, 7:36 AM cnet.com PHP Vulnerabilities Could Put Much of the Internet at Risk, Experts Warn
Oct 21, 7:31 AM techmeme.com OpenAI says the PHP flaws, found using GPT-5.6 Sol, "are among several significant vulnerabilities" it found and expects "similar findings to increase sharply" (OpenAI)
Oct 21, 7:26 AM wired.com ‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
Oct 21, 7:20 AM techmeme.com Cloudflare says it deployed default WAF mitigations for all free and paid tier customers to combat two PHP flaws, roughly nine hours ahead of public disclosure (Cloudflare)
Oct 21, 7:17 AM therecord.media Hundreds of websites taken offline as concern grows over two PHP vulnerabilities
Oct 21, 7:07 AM bleepingcomputer.com PHP ships emergency patches for critical PHP2Shell flaws
Oct 21, 7:06 AM techmeme.com PHP discloses a critical memory-management vulnerability, dubbed "PHP2Shell", that affects up to 70% of websites, discovered using GPT-5.6 Sol in August (Robert McMillan/Wall Street Journal)
Oct 21, 7:03 AM techmeme.com PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, urging all PHP users to update; all web-serving deployments are affected (PHP)
Oct 21, 7:01 AM theglobeandmail.com Government websites scramble to protect systems after PHP programming language security warnings
Oct 21, 7:00 AM thehackernews.com PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
Oct 21, 6:51 AM helpnetsecurity.com PHP2Shell: Critical PHP vulnerabilities patched, update now!
Oct 21, 6:46 AM straitstimes.com Government websites go dark as vulnerabilities in programming language send shudder across internet
Oct 21, 6:28 AM news.sky.com Websites warned to install critical PHP software update or go offline
Oct 21, 6:06 AM nbcnews.com Critical vulnerabilities in commonly used web code spark rush to update systems
Oct 21, 5:14 AM bbc.co.uk Cyber chiefs tell websites to make critical safety update or go offline
Oct 21, 5:07 AM bloomberg.com Governments Take Websites Offline After PHP Security Warnings
Oct 21, 4:49 AM theverge.com A critical programming vulnerability may take websites down today
Oct 21, 4:41 AM appleinsider.com New PHP vulnerability means the Internet will have a very rough couple of days
Oct 21, 4:33 AM bloomberg.com Finland Takes Down Websites as Precaution Due to Vulnerabilities
Oct 21, 4:02 AM engadget.com Two dangerous internet security issues are putting site admins on edge
Oct 21, 3:36 AM thehackernews.com PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
Oct 21, 3:26 AM straitstimes.com Patch or go dark: EU cyber officials warn websites over critical PHP flaws
Oct 21, 3:01 AM thenextweb.com EU cybersecurity team says unpatched PHP sites may need to go offline
Oct 21, 12:02 AM securityweek.com PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Oct 20, 10:20 PM techmeme.com An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 (Dan Goodin/Ars Technica)
Oct 20, 9:57 PM thehackernews.com PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
Oct 20, 7:12 PM arstechnica.com PHP maintainers tell Web devs to prepare themselves for critical security patches
Oct 20, 7:12 PM arstechnica.com PHP warns it plans to release 2 emergency patches imminently
Oct 20, 7:00 PM laravel-news.com Critical PHP Security Release Coming Tomorrow (October 21)
Oct 20, 5:00 PM openai.com Cloudflare links vulnerability discovery to defense with OpenAI
Oct 20, 2:55 PM techmeme.com PHP development team plans to release updates tomorrow to address two vulnerabilities, each rated 9.2; security researchers at watchTowr say they are RCE flaws (Lawrence Abrams/BleepingComputer)
Oct 20, 1:56 PM bleepingcomputer.com PHP warns admins of two critical flaws, emergency patches coming tomorrow

Editorial review