Critical PHP Vulnerabilities Threaten the Internet

Two critical vulnerabilities in the PHP language have been discovered on the internet, posing a direct threat to global network security. Experts rated the danger level at 9.2 out of 10 on the CVSS 4.0 scale.

The vulnerabilities allow attackers to remotely execute malicious code on servers, enabling them to hack websites and gain unauthorized access to users' confidential data.

First attacks already detected: government agencies in the Netherlands and Finland were forced to take their websites offline as a precautionary measure.

• Popular platform 4chan restricted site access to "read-only" mode
• Well-known resource Rule34 went completely offline for the first time in its 14-year history
• The list of affected services continues to grow

An official patch with bug fixes is expected soon. However, website owners are strongly advised to manually update PHP before the official release.

If immediate system updates are impossible, specialists recommend temporarily isolating the site from the internet until the threat is fully neutralized.