Race to update services' computer systems after cyber-security flaw found
Critical vulnerabilities, now named "php2shell," have been discovered in the programming language PHP, which powers an estimated 70% of the world's websites. These flaws, inherent in the language and affecting many past versions, allow unauthenticated attackers to remotely execute code on servers running PHP under certain conditions.

Critical vulnerabilities, now named "php2shell," have been discovered in the programming language PHP, which powers an estimated 70% of the world's websites. These flaws, inherent in the language and affecting many past versions, allow unauthenticated attackers to remotely execute code on servers running PHP under certain conditions. Cyber-security firm Wiz helped uncover these vulnerabilities. The PHP Foundation, responsible for maintaining the language, has warned of the risks. In response to the discovery, websites have been taken offline, and some large organizations have reported a high volume of attempted breaches.
Under the right conditions, an unauthenticated attacker could remotely execute code on servers running PHP.
The "php2shell" flaws are inherent in the PHP language itself, affecting many past versions.
Critical PHP vulnerabilities, coined "php2shell", have been uncovered.
PHP powers 70% of the world's websites.
Some large organizations have reported a high volume of attempts to breach their systems.