Unpatched PHP flaw lets attackers take over servers, leaving ~70% of the web exposed
josh_bickett · x · 2026-10-22
A widely shared explainer describes a critical PHP security incident: the PHP project disclosed a vulnerability that lets anyone take control of the server hosting a website — before an official patch was available. Since roughly 70% of websites run PHP, the world is in a dangerous window where attackers and defenders alike know about the flaw but no official fix exists. Some site owners have shut down their sites while others attempt improvised mitigations, causing global chaos among sysadmins.
More from Safety
- Dario says government should gate AI access; critics say Anthropic's bill doesn't do that — AlexTensor · 2026-10-22
- One man's AI agents breached 100+ company sites at ~$50 in tokens per hack — srimisra · 2026-10-22
- When the optimizer controls its own scoreboard: the hidden runaway path of recursive self-improvement — Gauri_the_great · 2026-10-22
- The world can't agree on AI safety — so why does the EU keep trying? — kindermaxi123 · 2026-10-22
- AI safety researcher urges AI lab employees to stop escalating model capabilities amid cyberattacks — max_paperclips · 2026-10-22
- Researcher calls for national-scale AI cybersecurity push: systems will finally be secure once backlog is paid down — max_paperclips · 2026-10-22