Cyber Chiefs Order Websites to Patch PHP Flaws or Shut Down

National cyber security agencies in the United States, United Kingdom and other allied nations have warned that two critical vulnerabilities have been discovered in PHP, the open‑source scripting language that powers a large share of the web. The flaws could allow attackers to execute arbitrary code on vulnerable servers, potentially compromising user data and site functionality.

The agencies have given website operators a short deadline to apply the necessary patches. Sites that fail to update risk being taken offline by the authorities to prevent further exploitation. The directive applies to all publicly accessible sites that rely on the affected PHP versions, regardless of size or industry.

Experts say the rapid response underscores the widespread reliance on PHP across e‑commerce, news, and government portals. Administrators are urged to verify their software inventories, apply the security updates released by the PHP development team, and monitor for any signs of intrusion.

Why It Matters

PHP underlies a significant portion of online services in the US and Europe, so unpatched sites could expose millions of users to cyber‑attacks.