# Zoe Kleinman: PHP is the cyber equivalent of an unexploded bomb

- URL: https://talkfuse.com/story/zoe-kleinman-php-is-the-cyber-equivalent-of-an-unexploded-bomb/
- Published: 2026-10-22T10:17:26+00:00
- Updated: 2026-10-22T10:24:03+00:00
- Original publisher: BBC Technology (publisher lean: Centre)
- Original article: https://www.bbc.co.uk/news/articles/cw98z6qlyvg3o?at_medium=RSS&at_campaign=rss
- Topics: Cybersecurity, Technology

## Key points

- PHP flaws triggered a worldwide security response.
- No successful attacks have been confirmed.
- Older websites may need upgrades before applying the patch.

## Summary

Researchers found long-standing security flaws in PHP, a programming language used by millions of websites, prompting an unusually broad global response before any confirmed attack. The incident highlights how AI may make vulnerabilities that are difficult for people to exploit more accessible to attackers, while also helping defenders discover and fix them.

The PHP Foundation issued a patch, but the news leaked before all site owners could update, starting a race to secure affected websites. Cloudflare and Palo Alto Networks have reported millions of attempts to exploit the flaws, though there are no confirmed successful attacks; older sites may need to upgrade PHP before they can install the fix.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.