[CLSTR]
< Back to all clusters
[TECHNOLOGY] · Germany, France, Belgium, Finland, Netherlands · 100 sources

started · updated

Part of situation: PHP emergency patching and RCE vulnerability response (2 clusters)

PHP2Shell vulnerabilities trigger global cybersecurity alert

PHP2Shell PHP vulnerabilities remote code execution cybersecurity alert artificial intelligence

Two critical vulnerabilities in the PHP programming language, collectively known as ‘PHP2Shell’ (CVE-2026-109618 and CVE-2026-109619), have prompted a global cybersecurity scramble. The flaws, which allow for unauthenticated remote code execution (RCE), were identified with the assistance of artificial intelligence, including OpenAI’s GPT-5.6 Sol and Google’s Gemini.

Following the announcement on October 21, 2026, numerous governments and organizations worldwide took preemptive measures to take websites offline. Affected services include government portals, hospitals, schools, and infrastructure such as the Port of Rotterdam. Countries reporting service interruptions or precautionary shutdowns include Germany, France, Belgium, Finland, the Netherlands, the United Kingdom, Canada, and the United States.

Security firms such as Wiz and Calif, alongside OpenAI, led the discovery efforts. Cloudflare reported millions of exploitation attempts following the disclosure, while Amazon’s MadPot honeynet observed exploitation attempts as early as October 17, four days before the public announcement. The vulnerabilities carry a CVSS v4.0 severity score of 9.2 out of 10. The PHP development team released emergency patches on October 21 for several versions, including 8.1.x, 8.2.x, 8.3.x, 8.4.x, and 8.5.x.

Entities

ACSC · Amazon · Australian Cyber Security Centre · BSI · Benjamin Harris · CERT-EU · Calif · Cloudflare · FBI · Federal Bureau of Investigation · Hacker News · Huntress

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Critical PHP Flaws Force European Public Institutions to Take Sites Offline • 360 Mozambique [360mozambique.com]
PHP'de İki Kritik Güvenlik Açığı Keşfedildi [www.44malatyahaber.com]
Una grave vulnerabilidad de PHP obliga a cerrar webs en varios países: ¿está segura tu página? [www.alhaurindelatorre.com]
Sicherheitslücke: Internetangebot teils noch eingeschränkt [www.allgaeuer-zeitung.de]
دنیا بھر میں لاکھوں ویب سائٹس اور کمپیوٹر نظام پر سائبر حملہ؟ اے آئی نے خامی پکڑلی [www.alqamar.info]
GMOペパボ「ロリポップ！」停止サイトを再開　旧バージョンのPHP脆弱性にも独自対応 [ascii.jp]
World leaders warn against security flaw found in PHP computer programming - Bahamas Spectator – Bahamas & Caribbean News, Travel & Business [bahamasspectator.com]
Caos en la red por PHP: gobiernos en todo el mundo cierran sitios web tras alerta de seguridad [bairesparatodos.com.ar]
PHP'deki kritik güvenlik açıkları kişisel verileri tehdit ediyor! [www.batmanrehbergazetesi.com]
Siber Güvenlik Başkanlığından PHP uyarısı: Ulusal ölçekte taramalar başlatıldı [besniyenibakis.com]
AI發現PHP重大漏洞「PHP2Shell」 全球七成網站告急 – 澳門捷報一專注大灣區「三創」資訊 [www.click2macao.com]
Cảnh báo về lỗ hổng PHP2Shell và cách khắc phục [congnghevadoisong.vn]
Government websites in Europe, elsewhere go dark as software flaw sparks security scramble - [dailymeezan.com]
OpenAI, PHP2Shell Açıklarını Bulan Koalisyona Liderlik Etti: Beş Aşamalı Savunma Planı [dijitaliyidir.com]
Los fallos críticos de PHP acaban de hacerse públicos. Lo misterioso es que alguien ya intentaba explotarlos cuatro días antes [dominicanaaldia.com]
Vulnerabilidad PHP2Shell provoca ataques informáticos masivos [elinformante.com.do]
Fallos de seguridad detectados por la IA causan problemas en webs de todo el mundo [elsolnewsmedia.com]
Vulnerabilidad crítica en PHP: Emergencia cibernética global por fallas 'php2shell' [espiganoticias.net]
Critical PHP flaws spark global cybersecurity alert [followlebanon.com]
Urgent PHP Security Warning: Apply Emergency Patch Today [forbesliberia.com]
Alarm për sigurinë kibernetike/ Mbyllen përkohësisht disa faqe online në të gjithë Evropën [gazetaimpakt.com]
İnternet Güvenliğinde Büyük Kriz: Devlet Siteleri Birer Birer Kapatıldı [www.guncelegitim.com]
Éjszaka során átmenetileg leállítotték a magyarország.hu oldalt [gyorihirek.hu]
Dünya çapında siber güvenlik açığı: “Türkiye'de ulusal ölçekte tarama başlatıldı” [haberkibris.com]
Hackeři napadli systémy ČVUT. Využili nejspíš bezpečnostní chybu, která ohrožuje velkou část internetu [domaci.hn.cz]
Alvorlig sikkerhedsadvarsel: Få tjekket jeres hjemmeside og bookingsystem [www.horesta.dk]
NRB Website Shutdown Global PHP Vulnerability Cybersecurity [ictframe.com]
다카이치 일본 총리 'PHP 취약점 매우 시급'…재무성·은행도 사이트 중단 - 매일신문 [www.imaeil.com]
La inteligencia artificial revoluciona la detección de amenazas en PHP y mejora la ciberseguridad [independientedeparaguay.com]
Fallo critico amenaza a nivel mundial millones páginas web | El Nuevo Norte [infoenn.com]
Fallas críticas en internet obligan a sitios web de varios países a desconectarse [infopress.pe]
Milioni pokušaja hakerskih napada zbog propusta u PHP-u, pojedini sajtovi privremeno ugašeni [insajder.net]
PHP 8.2.35 līdz 8.5.12 aizver divas CVSS 9,2 kļūdas: uzbrukumi sākās sešas stundas pirms ielāpa – itn — tehnoloģijas bez filtra [itn.lv]
Dos fallas críticas en PHP obligan a desconectar sitios web mientras se despliegan parches de seguridad [www.itnow.connectab2b.com]
Alerta de ciberseguridad: una falla en PHP pone en riesgo miles de páginas web [www.itsitio.com]
Hakeri sve veća prijetnja, BiH bez državne cyber odbrane [jajce-online.com]
전 세계 웹사이트 보안 비상…정부, 3만개 기업에 긴급 조치 안내 - 진일보 | 전남일보 [www.jnilbo.com]
İngiltere’de siber güvenlik açığı: 32 kamu hizmeti devre dışı [www.karsmanset.com]
ثغرات أمنية خطيرة في لغة PHP تهدد ملايين المواقع: كيف تحمي بياناتك؟ | وكالة خبر للأنباء [www.khbr.me]
PHP-sebezhetőség: CZ a kriptocégeket figyelmezteti [www.kriptoworld.hu]
Kritická chyba ohrožuje miliony webů po celém světě. Experti bijí na poplach [kryptomagazin.cz]
Websites Zeewolde, Dronten en Lelystad offline tijdens erns [lokaleomroepzeewolde.nl]
Cybersécurité : deux failles PHP secouent Internet. Les hébergeurs sonnent l'alerte [maghrebemergent.news]
Fallo critico amenaza a nivel mundial millones páginas web [maguacadigital.com]
Анализа на Би-Би-Си: Зошто PHP предизвика глобална битка за кибер безбедност? [makpress.mk]
PHP 보안 결함, AI 없으면 발견못했다…해킹 대응에 '창과 방패' - 미디어제주 [www.mediajeju.com]
Alerta mundial ante las vulnerabilidades de PHP que ponen en grave riesgo los servidores web [mioriente.com]
PHP lanzó parches de emergencia para dos fallas críticas que ponen en riesgo a millones de sitios web - MI PERIÓDICO - Últimas noticias de Argentina y del Mundo [www.miperiodico.com.ar]
Vladini sajtovi širom Evrope ugašeni zbog bezbednosnih propusta koje je otkrila AI [n1info.rs]
Ob nedavno razkritih ranljivostih programskega jezika PHP priporočila, na kaj bodite pozorni [n1info.si]
تهدید سایبری علیه خدمات دولتی انگلیس [negarmag.com]
AI nổi loạn, ai chịu trách nhiệm? [nhandan.vn]
CSA, NITA Sound Alarm over Vulnerabilities That Could Expose Ghanaian Servers [norvanreports.com]
Kritiskas PHP ievainojamības paver iespēju hakeriem pārņemt serverus [notepad.lv]
PHPの重大な脆弱性に関する報道を受け、当サイトの安全対策を確認 [np-schools.com]
Alarm për sigurinë kibernetike/ Mbyllen përkohësisht disa faqe online në të gjithë Evropën [ntv.al]
Ghana Orders Government Agencies to Fix PHP Security Flaws [nukunya.com]
Zaradi resnih varnostnih napak po svetu ugašajo spletne strani. Kaj pa v Sloveniji? [obalaplus.si]
ВЛАДИ, БОЛНИЦИ И УЧИЛИШТА НИЗ ЕВРОПА ГИ ИСКЛУЧИЈА СВОИТЕ ВЕБ-СТРАНИЦИ [ohridsky.com]
PHP 爆兩大致命漏洞　毋須登入即可入侵伺服器　WordPress 等網站須緊急更新 [www.pcmarket.com.hk]
Serious security vulnerability discovered in PHP, affecting government websites worldwide, including Nepal [peoplesreview.com.np]
Wettrennen der KI in der Cybersicherheit [protector.de]
Sites web suspendus : ce qu'il faut savoir sur la menace des failles PHP - Radio One [radio1.mu]
Alerta mundial por dos fallas críticas en PHP: gobiernos y empresas desconectaron cientos de sitios web [radiotvsierras.com]
Nga Evropa në Azi, çaktivizohen mijëra faqe qeveritare dhe shërbime publike në mbarë botën, roli i IA-së në zbulimin e të metave në PHP [rtsh.al]
WordPress網站管理員注意！PHP 9.2分嚴重漏洞已修補 FBI促即時更新 - 星島日報 [www.singtaousa.com]
Türkiye Siber Güvenlik Başkanlığı'ndan ulusal çapta güvenlik uyarısı! [sondakikakibris.com]
PHP-Sicherheitslücke: Stadt Mettmann reagiert mit Update [supertipp-online.de]
12 % českých společností už zaznamenalo pokus o zneužití zranitelností PHP2Shell [www.systemonline.cz]
Up to 70% of Websites Vulnerable to New Security Hole — Some Countries Take Sites Offline [www.telanganatribune.com]
Krytyczna luka w PHP sprawiła, że wiele rządowych portali na świecie zostało zamkniętych [www.telko.in]
전문가들과 함께 만드는 신문 - 조세금융신문(www.tfnews.co.kr) [www.tfmedia.co.kr]
Government Agencies Ordered to Patch Critical PHP Cybersecurity Flaws Within Seven Days [thehighstreetjournal.com]
Critical PHP Flaw Prompts Precautionary Website Shutdowns [thepost.sydney]
AI Discovers Critical Vulnerabilities in PHP Triggering Global Precautionary Website Blackouts [ticosland.com]
Siguria kibernetike bllokon një pjesë të faqeve në internet nga një alarm global, mund të prekë edhe shërbimet qeveritare [tirananews.al]
Los sitios web se apresuran a solucionar un fallo de software que podría poner en riesgo gran parte de Internet. Todo es Política [todoespolitica.com.ar]
NSA의 PHP 오프라인 권고 날, 악성 배포본·인증기관 키 사고 겹쳤다 [www.tokenpost.kr]
Alerta mundial por dos fallas críticas en PHP: gobiernos y empresas desconectaron cientos de sitios web [tolhuinprimero.com]
호주 정부 등 전 세계 웹사이트 일시 다운 - 호주 톱뉴스(Australian TOP News) [www.topdigital.com.au]
Kritik siber güvenlik uyarısı: Kurum ve kuruluşlara acil güvenlik bildirimleri iletildi! [www.trakyaolay.com]
ウェブサイトを動かす「PHP」に重大な脆弱性、国が対応を呼びかけ、観光・レジャー分野でもアクセス遮断やサイト一時停止など [www.travelvoice.jp]
Со ВИ откриен критичен пропуст во PHP, кодот на кој се базирани веб-страниците [trn.mk]
Aula-platform genåbner efter potentiel sikkerhedsrisiko [www.tv2bornholm.dk]
Intet tyder på sikkerhedsbrud i Aula, siger leverandør [www.tv2kosmopol.dk]
PHP 9.2 分漏洞今晚修補　企業要趕在攻擊潮前盤點隱藏系統 [unwire.pro]
Php en alerte rouge : ce que cachent les failles critiques qui menacent le web [voixdufaso.info]
PHP2Shell alarmı: Enerji altyapısının görünmeyen katmanı ve yapay zekâ çağında güvenlik [yesilhaber.net]
ZiarulNational.md ultimele știri din Moldova [www.ziarulnational.md]
Critical PHP Security Flaws Put Millions of Websites at Risk [www.zimcelebsofficial.com]
Cloudflare 執行長示警：PHP 兩大漏洞遭大規模利用，攻擊嘗試暴增至數百萬次 – 桑幣區識 Zombit [zombit.info]
DigiD, MijnOverheid en RTL weer online na ernstig beveiligingslek: websites keren langzaam terug - 112Vandaag [112vdg.nl]
Hackers kunnen toeslaan: websites gemeenten en provincie uit voorzorg offline [1zwolle.nl]
Black October: 24 घंटे में इंटरनेट पर मचा हड़कंप, वेबसाइटों से लेकर AI सॉफ्टवेयर तक पर साइबर हमले [www.aajtak.in]
Falhas na linguagem de programação PHP obrigam sites em vários países a desligar-se [zap.aeiou.pt]
D66: Hoe informeert Rotterdam de inwoners bij grote cyberstoringen? [albrandswaardsdagblad.nl]
Experte: Ungeschützte Webseiten abschalten [www.allgaeuer-zeitung.de]
BSI warnt nachdrücklich vor Schwachstellen in PHP [alltagsmagazin.de]
World leaders warn against security flaw found in PHP computer programming - Antigua Tribune – Daily Antigua & Caribbean News, Global Headlines & Insights [antiguatribune.com]
UpdraftPlus WordPress Plugin Security Breach Enables Backdoor Attacks [areyoupop.com]