PHP security vulnerability threatens global websites

A critical security vulnerability discovered in the PHP programming language has placed approximately one-third of all websites at risk. Because PHP is used by roughly 69% of the world's websites, the inability to patch older, unsupported versions creates a massive security gap. Research from Deloitte Tohmatsu Cyber and W3Techs indicates that 48% of PHP-using sites are running versions that no longer receive official security updates.

Updating to the latest version often presents technical challenges, as it can break existing site functionalities. This issue is particularly acute for "dormant sites" and small businesses that lack the budget or technical expertise to manage complex updates. In Japan, some services have already ceased operations due to the difficulty of addressing these vulnerabilities. In Brazil, hacked government websites were reportedly used as command servers for cyberattacks.

In response to the threat, South Korean authorities are working to support small and medium-sized enterprises (SMEs). Since many SMEs rely on web hosting services rather than private servers, the Ministry of Science and ICT is coordinating with hosting providers to identify vulnerable versions and guide users through patching or upgrading processes. While no domestic damage has been officially confirmed in South Korea, major online communities have already implemented emergency security measures.