GMAsia
    🇨🇳China·Policy·21 Oct 2026·via SCMP

    Websites go dark worldwide as AI exposes critical security flaws

    Government agencies and companies globally shut down websites after two critical flaws were discovered in PHP, a programming language underpinning an estimated 70 percent of the world’s websites. Security firm Wiz, which identified the issues, described them as among the most severe vulnerabilities in software history, according to the article.

    Nexa's Summary

    The identified PHP vulnerabilities are critical because they allow attackers to take control of servers without needing a password. Wiz, one of the security firms that found the issues, estimated that PHP runs about 70 percent of the world’s websites, indicating a broad potential impact across various web design platforms.

    The severity of these flaws stems from their potential to offer a direct path to a server's file system or database. The US National Security Agency (NSA) stated that the vulnerabilities "often provide a direct path to the server’s file system or database," highlighting the risk of significant data breaches or operational disruptions for affected organizations.

    The immediate response from the NSA, which advised organizations to either patch their systems or take them offline, underscores the urgency of the situation. This directive points to the significant operational challenge faced by companies and agencies globally in securing their digital infrastructure against these newly exposed threats.

    Share this article

    Original reporting by SCMPWe don't republish, read the full story →

    Related reading

    6 stories