‘It’s been relentless’ say IT workers on frontline of PHP cyber-security scramble

A critical security flaw in PHP, a programming language used by millions of websites, triggered an urgent global effort to install fixes or take vulnerable systems offline. IT workers described long hours and intense pressure as they assessed risks and updated customers’ sites.

The PHP Foundation released a patch on Wednesday at 15:00 BST, but some systems rely on outdated PHP versions that need rebuilding or code changes. Experts said rumours of attackers using working methods to exploit the flaws were fuelled by poor intelligence and retracted warnings; despite claims of millions of attempts, the article reports no evidence of large-scale breaches or attacks.