Millions of hackers worldwide have attempted cyberattacks by exploiting two major security vulnerabilities in PHP—the most widely used programming language for web development. In response to this crisis, governments and businesses across various countries have suspended or limited their online services. Describing the situation, Microsoft CEO Satya Nadella remarked that he had not seen anything like this in a very long time.
On Wednesday, PHP developers released a new version that addresses one of these security flaws. Both vulnerabilities were identified using artificial intelligence (AI). However, the risk of cyberattacks has intensified because details regarding these security flaws were leaked before the new version was released.
PHP is a programming language extensively used for building and managing websites. Users are advised to update their applications as soon as any security vulnerability is reported.
Madeleine Lawrence, co-founder of the Belgium-based startup ‘Aikido Security,’ stated that attempts to seize control of various websites have been ongoing since information about the security flaws began to spread. Many organizations are now rapidly updating their websites and applications to thwart such attacks.
Matthew Prince, CEO of the cloud technology startup ‘Cloudflare,’ reported a significant surge in cyberattacks following the disclosure of the security vulnerabilities. He noted that within the first 45 minutes of the information becoming public, the number of attempted attacks reached several thousand; two hours later, that figure had climbed to hundreds of thousands, with the attacks continuing thereafter.
Several Japanese organizations announced on Thursday that they had temporarily suspended some of their online operations to mitigate security risks. These include Mitsubishi UFJ Financial Group, ANA Airlines, and East Japan Railway Company. Additionally, Japan’s Ministry of Finance and the Japan Meteorological Agency have imposed restrictions on internet usage. French mobile operator ‘Orange’ has also taken similar precautionary measures. The company stated that it has temporarily restricted access to some of its PHP-based websites and applications. ‘Tencent Cloud,’ one of China’s largest cloud service providers, has also advised its customers to promptly upgrade to the latest version of PHP.
According to experts, this security situation involving PHP poses a significant threat to the security of digital devices worldwide. The incident highlights the need for routine system maintenance and timely security updates to keep cybersecurity systems reliable, effective, and protected against potential threats.
Microsoft CEO Satya Nadella remarked on Wednesday, “It’s been a long time since I’ve seen something like this.” He emphasized the need to build digital systems that can be regularly maintained while upholding robust security standards.
Haya Shulman, Scientific Director at the German cybersecurity organization ‘Fraunhofer Innovation Platform,’ described this incident as one of the most significant cybersecurity crises of the past two years. Urging a swift resolution, she noted that the security risks involved are very real.
