EU cyber team warns websites to go offline due to PHP vulnerabilities

1. 21:30
   CointelegraphRelated fact: single sourceSource report revised

   Cybersecurity professionals face brutal month amid wave of major attacks and AI-discovered vulnerabilities

   Report first recorded Oct 28, 21:38

   Critical vulnerabilities in PHP, used by roughly 70% of websites, were discovered with AI assistance and disclosed on Oct. 21, prompting millions of exploit attempts recorded by Cloudflare. Governments including France and Finland temporarily restricted website access, while the US NSA warned organizations to patch immediately. Security researcher Illia Polosukhin described the situation as "Security Armageddon," and Anthropic's Jason Clinton warned conditions would worsen. UK citizens were urged to prepare for potential infrastructure disruptions, and US military installations were told to prepare for 90 days of independent operation. Beyond the PHP flaw, cloud platform Railway reported attacker access to customer credentials and API keys, targeting AI providers. Quest Diagnostics confirmed a patient data breach, and GitHub experienced major service disruption highlighting reliance on shared infrastructure.

   Read original source ↗

1. 22:25
   CointelegraphRelated fact: single sourceSource report revised

   Immunefi CEO warns PHP flaw triggers scheduled vulnerability apocalypse

   Report first recorded Oct 26, 22:58

   A critical PHP vulnerability disclosed last Wednesday remains unpatched on many smaller websites, leaving internet users exposed to exploits. Cloudflare reported millions of exploit attempts within 24 hours of the public disclosure. The PHP Foundation delayed the fix due to resource shortages, and the flaw may allow remote code execution, data theft, and malware distribution. Users are advised to treat all sites as potentially compromised, avoid password reuse, and revoke unrecognized token approvals.

   Read original source ↗

1. 17:06
   CointelegraphRelated fact: single sourceSource report revised

   Cloudflare CEO warns of millions of exploit attempts targeting PHP flaw

   Report first recorded Oct 22, 17:27

   A PHP vulnerability has drawn millions of exploit attempts, according to a warning from the Cloudflare CEO. Attackers are attempting to infiltrate target systems using this flaw, and Cloudflare is actively monitoring and providing protective measures, though the full scope of affected systems and remediation progress has not been fully disclosed.

   Read original source ↗
2. 15:42
   Latent Space

   OpenAI's Patch the Planet and Wiz discover PHP2Shell vulnerabilities affecting 70% of web

   Report first recorded Oct 22, 16:20

   Two parties, Ryan Austin from Calif (as part of OpenAI's "Patch the Planet" project using GPT-5.6 Sol) and Wiz (using Gemini 4 Argon and GPT-5.6 Sol), independently discovered two PHP-engine memory-corruption vulnerabilities, PHP2Shell (CVE-2026-109618 and CVE-2026-109619), almost two months ago. These defects are in PHP's internal handling of out-of-memory conditions and fatal errors, not in CMS plugins, and demonstrations showed pre-authentication RCE against WordPress, Drupal, and Joomla, potentially affecting 70% of the web through a coordinated ecosystem response.

   Read original source ↗
3. 08:44
   CointelegraphRelated fact: single sourceSource report revised

   PHP Foundation admits structural failure delayed critical security fix for 2024 vulnerability

   Report first recorded Oct 22, 08:57

   The PHP Foundation acknowledged that indecision and resource shortages led to a "structural failure" delaying a fix for a critical security flaw first identified in 2024. Emergency patches were released for two related vulnerabilities, which could allow unauthenticated attackers to execute code on affected servers. Global organizations, including government agencies in the Netherlands, Finland, France, Germany, and Australia, took websites offline as a precaution, and the Wikimedia Foundation temporarily suspended some services.

   Read original source ↗
4. 06:42
   BeInCryptoRelated fact: single source

   Critical PHP2Shell Flaw Poses Security Risk to Crypto Payment Sites and Exchanges

   Report first recorded Oct 22, 07:14

   PHP developers released emergency patches for two critical vulnerabilities, PHP2Shell (CVE-2026-109618 and CVE-2026-109619), rated 9.2 out of 10 severity, which could allow hackers to access vulnerable servers without passwords and steal sensitive information like passwords, authentication tokens, and API keys. Crypto payment gateways using PHP integrations (e.g., Binance Pay, CoinGate, BitPay) and smaller PHP-based exchanges face potential exposure, while major exchanges are less at risk if properly patched. Cloudflare confirmed attackers have attempted to exploit these flaws, and several European government websites were temporarily shut down as a precaution.

   Read original source ↗
5. 02:41
   Simon WillisonSource report revised

   PHP Foundation releases urgent security update for PHP 8.x addressing two RCE vulnerabilities

   Report first recorded Oct 22, 03:00

   The PHP Foundation released an urgent security update for the entire PHP 8.x line on October 21, 2026, to address two remote code execution (RCE) holes; the actual CVSS score is 9.2, not the initially leaked 10.0. The disclosure was accelerated due to a leak on October 20, 2026, which included a proof-of-concept video from a security firm, leading to accelerated PoC development and circulation on October 21, 2026. Wiz Research first discovered the vulnerabilities on August 19, 2026, and reported them to the PHP security team on August 24, 2026.

   Read original source ↗
6. 01:00
   CryptoSlateSource report revised

   PHP releases emergency patches for two critical vulnerabilities allowing unauthenticated code execution

   Report first recorded Oct 22, 01:45

   PHP released fixes on Oct. 21 for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both with a CVSS v4.0 severity score of 9.2 out of 10. These flaws, known as PHP2Shell, affect all PHP installations serving web requests, with the highest risk in Apache's mod_php, allowing exploitation before application code begins. The fixes are available in PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Cloudflare observed attack traffic targeting customers, and security chiefs at Kraken and Ledger warned of the risks to cryptocurrency businesses, urging immediate patching and infrastructure checks beyond vulnerable websites.

   Read original source ↗

1. 23:35
   DecryptSelectedSource report revised

   PHP Foundation warns of two critical vulnerabilities affecting 70% of websites

   Report first recorded Oct 21, 23:58

   PHP released emergency versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21 to fix CVE-2026-109618 and CVE-2026-109619, two flaws rated 9.2 out of 10 that allow unauthenticated remote code execution. Finland, the Netherlands, and France took government websites offline as a precaution after details leaked early and Cloudflare reported attacks hours before the fix shipped. Regular users have nothing to install; the fix falls on website owners and hosting companies, and PHP 8.1 and older get no official release.

   Read original source ↗
2. 22:00
   BeInCryptoRelated fact: single source

   EU cyber team warns websites to go offline over critical PHP vulnerabilities

   Report first recorded Oct 21, 22:11

   Europe's cyber emergency team has advised websites unable to patch two critical PHP vulnerabilities to consider going offline, as the flaws could allow attackers to take over servers without a login. Details of the vulnerabilities leaked online before fixes were ready, with early attacks already reported by Cloudflare. The vulnerabilities affect all PHP releases from version 5 onward, potentially leaving many WordPress and Magento sites exposed.

   Read original source ↗

The chart compares consistently observed participants only. Hover or tap to inspect each hour; use arrow keys to move between observations.