UK Government Investigates Exposure After Critical PHP Security Flaws Discovered

The UK government is working to identify potential exposure in its online services following the discovery of critical security flaws in the PHP programming language, which underpins a significant number of global websites, including Wikipedia and WordPress. Amazon reported multiple 'PHP2Shell exploitation attempts' on October 17, occurring before the warning embargo was lifted, and noted that the flaws went undetected for at least a decade. The National Cyber Security Centre (NCSC) urged all organizations to apply fixes or take systems offline if immediate remediation is not feasible. Wiz estimated that roughly 70% of the internet is affected.