PHP: The three little letters wreaking havoc across the web
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger .
By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.
But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.
Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”
The Internet Archive was briefly forced offline because of PHP.
Two old-school Japanese mobile games are shutting down over the PHP exploit.
The PHP2Shell exploit hit Cloudflare hard.
PHP: The three letters that shut down sites all over the internet today
GPT‑5.6 Sol was used to identify critical PHP flaw.
A critical PHP vulnerability may take websites down today
News is gathered automatically from public robotics & AI feeds on a schedule.
Related
OpenAI, Anthropic, and Nvidia had record lobbying quarters
It was a busy summer for AI lobbyists. Anthropic, OpenAI, and Nvidia each had their highest-spending lobbying quarter between July and September, federal disclosures show. Nvidia spent the most of the group at $2.2 million, followed by Anthropic's $2.1 million and OpenAI's $1.5 million. Compared to
1Password lets AI agents use your passwords without seeing them
1Password is introducing a new feature that allows AI agents to sign into your accounts without actually seeing or handling your passwords. The aptly named 1Password for Agents doesn't give bots free reign to access all of your connected accounts - you'll still need to grant approval for sign-in req
Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots
Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that "your secrets are safe with me," but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning. The Verge
AI agents are ready to shop. Some retailers are wary
Using an AI agent to shop for you is a strange experience. Tech companies have marketed them as personal assistants - the democratizing of labor that ordinarily would only be available to the rich and powerful. In practice, at least for buying things, it's more like sending an anxious and apologetic
Spotify’s current AI bet is about being the music service that agents choose
Spotify co-CEO Gustav Söderström explains why the rise of AI agents could be good news for the music service.