







Several government, school and hospital websites across Europe and beyond were taken offline on Wednesday as organizations rushed to protect themselves from two critical security flaws in PHP, a programming language that powers a large share of the internet.
What is PHP and why did it take government websites offline?
The developers of PHP said they would release patches for two critical vulnerabilities.

Finland temporarily shuts down government websites as a precaution for critical vulnerabilities
The move is due to vulnerabilities found in widely used PHP software, which acts as the primary back-end backbone of the web.
Government websites go dark after AI-discovered flaw sparks security scramble
Government websites in Europe and elsewhere went offline after the disclosure of critical vulnerabilities in a widely used programming language that sent website operators around the world scrambling to protect their systems.

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

Chris Silverman 🌻 (@csilverman@mastodon.social)
Nothing puts the lie to "PHP is irrelevant" like "good morning, 70% of the internet needs to be fixed ASAP".
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.

PHP: Downloads
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

PHP
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

PHP
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.

Gina Peter Banyard (@Girgias@phpc.social)
@whitequark@treehouse.systems The only thing I can say is that the only mitigation is patching / upgrading PHP. I sadly know too much.
PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

shitposts aside, this one is serious, my loves: if you’re just waking up and you have any service online running PHP 5.4 to latest, you need to take it down RIGHT NOW and don’t put it back online until after it’s patched absolutely catastrophic vulnerability dropped in the middle of the night