Government websites and critical infrastructure portals across Europe and other regions have reportedly gone offline as system operators scramble to deploy urgent defenses. The widespread disruption allegedly stems from critical vulnerabilities discovered in PHP, one of the most widely used programming languages underpinning the global digital architecture.
Developers of the PHP programming language rolled out urgent patches, strongly encouraging all users to apply updates immediately. According to reports, the flaws had allegedly been lurking within the foundational software codebase for over a decade before being uncovered with the help of artificial intelligence. Critics point out that details of the issues leaked online prior to the release of official fixes, leaving systems exposed to potential exploitation.
In the Netherlands, the national cybersecurity agency itself reportedly went offline as a precaution, followed by the Port of Rotterdam, government portals, and major political party websites. Similar preventive measures were allegedly implemented by Finland's state IT service provider Valtori and France's Ministry of the Interior, which placed all its official platforms into maintenance mode amid mounting concerns.
The two flaws, dubbed PHP2Shell, were independently identified by cybersecurity firms using AI and scored 9.2 out of 10 on the industry severity scale, placing them firmly in the critical category. Industry analysts claim the vulnerability allows malicious actors to execute arbitrary code on remote servers, potentially compromising sensitive database credentials and sensitive administrative records.
Amazon security chief CJ Moses reportedly stated that his teams detected an exploitation attempt days before the vulnerabilities were publicly disclosed. While developers rush to mitigate the fallout, cybersecurity experts warn of an impending wave of intrusions targeting the shared digital infrastructure that powers a vast majority of websites worldwide.
Source: www.aljazeera.com