What is PHP and why did it spark a global cyber security scramble?

Researchers used AI to uncover serious, long-hidden vulnerabilities in PHP, a programming language that powers many websites. The flaws could let attackers take control of affected servers without authentication and steal data, prompting a global cyber-security alert and widespread efforts to patch or temporarily take platforms offline.

PHP has been used since the 2000s and supports services including online shops, Wikipedia and many WordPress sites. The flaw may affect millions of websites; Wikimedia and public organisations in several countries temporarily took systems offline as a precaution. PHP developers released emergency patches, while agencies including the US National Security Agency and the UK's National Cyber Security Centre urged operators to update immediately and check for signs of intrusion.