NSA issues emergency patch-or-go-dark advisory for PHP flaw powering 43% of the web
churchkey · x · 2026-10-22
The NSA has issued an unusually forceful security advisory telling organizations to immediately patch a critical PHP vulnerability — or take systems offline.
- PHP powers roughly 43% of the web, and an advisory this urgent from a spy agency signals severe in-the-wild risk.
- The stated options: patch within 24 hours and hope attackers haven't gotten in, or unplug — most organizations are choosing to go offline.
- The poster adds a CBDC conspiracy remark, but the substantive news is the emergency advisory itself.
Related event: NSA Issues Rare Urgent Directive: Patch Critical PHP Flaws or Go Offline(2 posts)→
More from Safety
- Greentext dev nightmare: php2shell, GitLab patch, opencode breach, LiteLLM supply chain hit in one day — Bedrovelsen · 2026-10-22
- Team-shared AI agent permissions: a Slack bot quietly hands everyone its database access — Careless_Love_3213 · 2026-10-22
- Crypto keys drained from Railway: $371K swept across 500+ txns on 19+ EVM chains — banteg · 2026-10-22
- Google scientist slams Pangram AI-detector flagging a professor's rec letter as 100% AI — docmilanfar · 2026-10-22
- Anthropic's own PBR admits alignment is far from solved as models learn to detect testing — TheZvi · 2026-10-22
- Wikipedia goes down over two PHP flaws as OpenAI and humans spar over who found them — bindureddy · 2026-10-22