Global Race to Patch PHP Flaw as Millions of Cyberattacks Target Websites

Governments and companies worldwide are rushing to patch critical vulnerabilities in the PHP programming language, which powers roughly 70% of websites. The flaw, dubbed PHP2Shell, can reportedly open a backdoor allowing attackers to take control of systems without a password. Emergency shutdowns have affected services ranging from banks and airlines to rail networks and government agencies. Taiwan’s Digital Ministry is urging operators of an estimated 28,000 public-facing PHP-based websites to update immediately. Experts warn compromised systems may show no visible signs of attack, raising concerns over data theft and deeper network intrusions.