NEWSAR
Multi-perspective news intelligence
SRCBBC News - World
LANGEN
LeanCenter
WORDS199
ENT9
THU · 2026-10-22 · 17:12 GMTBRIEF NSR-2026-1022-121131
News/Race to update services' computer system/Race to update services' computer systems after cyber-securi…
NSR-2026-1022-121131News Report·EN·Technology

Race to update services' computer systems after cyber-security flaw found

Critical vulnerabilities, now named "php2shell," have been discovered in the programming language PHP, which powers an estimated 70% of the world's websites. These flaws, inherent in the language and affecting many past versions, allow unauthenticated attackers to remotely execute code on servers running PHP under certain conditions.

1 hour agoShareSaveAdd as preferred on GoogleTom GerkenandLiv McMahon,Technology reportersBBC News - WorldFiled 2026-10-22 · 17:12 GMTLean · CenterRead · 1 min
Race to update services' computer systems after cyber-security flaw found
BBC News - WorldFIG 01
Reading time
1min
Word count
199words
Sources cited
2cited
Entities identified
9entities
Quality score
100%
§ 01

Briefing Summary

AI-generated · Oct 22, 2026
NEWSAR · AI

Critical vulnerabilities, now named "php2shell," have been discovered in the programming language PHP, which powers an estimated 70% of the world's websites. These flaws, inherent in the language and affecting many past versions, allow unauthenticated attackers to remotely execute code on servers running PHP under certain conditions. Cyber-security firm Wiz helped uncover these vulnerabilities. The PHP Foundation, responsible for maintaining the language, has warned of the risks. In response to the discovery, websites have been taken offline, and some large organizations have reported a high volume of attempted breaches.

Confidence 0.90Sources 2Claims 5Entities 9
§ 02

Article analysis

AI-classified
Framing
Technology
National Security
Tone
Mixed Tone
AI-assessed
CalmNeutralAlarmist
Factuality
0.80 / 1.00
Factual
LowHigh
Sources cited
2
Limited
FewMany
01

Under the right conditions, an unauthenticated attacker could remotely execute code on servers running PHP.

factualThe PHP Foundation
Confidence
1.00
02

The "php2shell" flaws are inherent in the PHP language itself, affecting many past versions.

factualcyber-security firm Wiz
Confidence
1.00
03

Critical PHP vulnerabilities, coined "php2shell", have been uncovered.

factualcyber-security firm Wiz
Confidence
1.00
04

PHP powers 70% of the world's websites.

statisticcyber-security firm Wiz
Confidence
1.00
05

Some large organizations have reported a high volume of attempts to breach their systems.

factual
Confidence
0.90
§ 04

Full report

1 min read · 199 words
It's a programming language which runs on a web server, behind the scenes of a website, and effectively lets you see the sites you visit.When you go to a site, PHP is the code which collects data and effectively turns it into a page you can read.It was developed in the early 1990s to help serve dynamic web pages and applications, but still powers lots of platforms today. PHP has been used across a wide range of platforms including Wikipedia, online shops and WordPress – the system behind many websites - as well as to write tools to build web apps, with Laravel, Symfony and Drupal among popular PHP frameworks.According to cyber-security firm Wiz, which helped uncover the critical PHP vulnerabilities surfaced this week, PHP powers 70% of the world's websites. And it said the flaws - now coined "PHP2Shell" - were inherent in the language itself, affecting many past versions of it.PHP-foundation" class="entity-link entity-organization" data-entity-id="221403" data-entity-type="organization">The PHP Foundation, the non-profit which maintains the programming language, warned this meant that, under the right conditions, an unauthenticated attacker would be able to remotely execute code on servers running PHP.Some large organisations said they had seen a high volume of attempts to breach their systems.
§ 06

Keywords & salience

AI-extracted · 10 terms
php
1.00
cyber-security flaw
1.00
php2shell
0.90
programming language
0.80
web server
0.70
remote code execution
0.70
vulnerabilities
0.60
php foundation
0.50
web applications
0.40
wordpress
0.40
§ 07

Topic connections

Interactive graph
Network visualization showing 6 related topics
View Full Graph
Person Organization Location Event|Click node to navigate|Edge numbers = shared articles