PHP-ocalypse: How two critical web bugs almost broke the internet

Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.

PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat

A cybersecurity researcher explains how a flaw in widespread software makes millions of websites vulnerable to hackers – and ...

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

What's going on with PHP? Could websites you use be affected?

Confused about the PHP security warnings? Here's what happened, which websites could be affected and whether you need to do ...

What Is PHP? Why Are Government and Business Websites Going Offline?

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch ...

Hacking attempts surge as companies, governments rush to patch PHP flaws

Cloud services firm Cloudflare saw millions of exploitation attempts after the public disclosure of critical vulnerabilities ...
Unite.AI

PHP Patches Two Critical RCE Flaws Found with Frontier AI Models

The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, security releases that fix two critical vulnerabilities that can allow unauthenticated remote code execution and ...

OpenAI says GPT-5.6-Sol helped find the PHP flaws now shaking the internet

OpenAI says its AI models helped uncover the critical PHP security flaws that have websites across the internet scrambling.