Why governments pulled websites offline over the decades-old PHP language
1 points, 0 comments on Hacker News
#php
Page 3 of 5 — 115 headlines
‘No indications’ PHP code flaw has led to government systems being hacked, cyber security official says – UK politics live
Some 32 government services are offline while work is carried out to address potential cybersecurity issues, a minister has said Tell us: have you been affected by the PHP code flaw? The Office for National Statistics has also published a report on the gender pay gap . It says: The gender pay g...
Tell us: have you been affected by the PHP code flaw?
We’d like to hear from small businesses that have been affected by the PHP code flaw. Did you have to take you website offline? Did you manage to patch the fault?
Show HN: Blastradius – find PHP2Shell, Node, emSign or leaked tokens
1 points, 0 comments on Hacker News
PHP2Shell: Two Critical PHP CVEs, Ten Node.js Bugs and a Compromised CA
1 points, 0 comments on Hacker News
Show HN: Php2ShellCheck – Python script that checks for vuln indicators
Hi All. A coworker and I (and AI) built this python script that checks HTTP response headers for indicators that the site is using a version of PHP that's vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619). It's an asynchronous HTTP/HTTPS header inspection tool that fingerprints PHP and...
Building a Passive PHP2Shell Header Inspector with Next.js and Cloudflare
When maintaining a PHP website, a simple question can lead to several different investigations: Which PHP version does the website advertise? Which version actually serves requests? Has the hosting provider backported a fix?
PHP flaw draws millions of exploit attempts, Cloudflare CEO warns
Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed.
What is PHP and why did it spark an international cyber-security alert?
AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.
Cloudflare sees millions of exploit attempts after PHP disclosure
Developing story — details emerging. Check the source link for the latest updates.
What is PHP and why did it spark a global cyber-security scramble?
AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.
Ask HN: What is the advantage of PHP over C?
I saw such a post on X: "Why half the internet still runs PHP. " https://x. com/artillain/status/2113018532980211928 What do you guys think?
A sourced timeline of the PHP2Shell leak and embargo break
2 points, 1 comments on Hacker News
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.
Widespread PHP Flaw May Cause Many Site Outages Today
1 points, 0 comments on Hacker News
PHP 9.2 Critical Memory Corruption CVE
4 points, 0 comments on Hacker News
Prompt "find bad vulnerabilities in PHP" was enough to find the PHP vuln
3 points, 1 comments on Hacker News
PHP blames supply chain security biz for putting chunks of the web at risk
1 points, 1 comments on Hacker News
PHP Foundation admits ‘structural failure’ delayed critical security fix
Government websites and online services were disrupted after concerns about a PHP bug that could allow attackers to take control of vulnerable servers.
Amazon identifies PHP2Shell exploitation prior to public disclosure
3 points, 0 comments on Hacker News
PHP2Shell: Both CVEs are two directions through the same pre-RINIT window
1 points, 0 comments on Hacker News
World leaders warn of security flaws found in PHP programming language
AI was used to pinpoint two vulnerabilities in the PHP language, used by about 70 percent of websites.
Code Smell 322 - Request Data in Long-Lived Variables (PHP Vulnerability)
Your request is gone. Your pointer is not. TL;DR: Don't keep request-owned pointers in long-lived variables, or the next request reads freed memory.
Urgent Patch Alert: PHP2Shell, GitLab RCE, and Node.js Brotli RCE
Updated October 22, 2026. Security fixes were released on October 21. Three code-execution risks deserve prompt attention: PHP2Shell, GitLab CVE-2026-110264, and Node.