The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
US government says hackers are now exploiting critical PHP web bugs

Key takeaways
US CISA warns hackers are exploiting critical PHP vulnerabilities, urging agencies to patch within three days.
- CISA confirms hackers are exploiting critical PHP bugs, requiring urgent fixes.
- PHP is used by 70% of web servers, risking major sites and apps.
- Researchers found a way to exploit two dormant PHP bugs using AI.
Summarised automatically by AI from the original article by TechCrunch. AI can make mistakes, so check the original for details.
Story details
- Published
- By
- Zack Whittaker
- Section
- Security
- Length
- 393 words · about 2 min read
- Format
- Article
- Original
- techcrunch.com ↗
Related reporting
6 stories on this topic from 3 sources, oldest first.
- Hacker News Upcoming Critical PHP Security Release
- Hacker News PHP2Shell: AI uncovers critical RCE in PHP
- Hacker News Potential third critical PHP CVE
- Hacker News US designates helium as a critical material
- TechCrunch US government says hackers are now exploiting critical PHP web bugs (this story)









