The Product file

PHP

11 stories · 5 sources · updated every week

PHP's critical RCE flaws, active since 2004, prompted a CISA federal patch deadline on Oct 30 for 70% of web-facing servers. Watch for smaller sites and embedded devices to struggle with patching capacity beyond this date.

Timeline

Oct 29

An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 (Dan Goodin/Ars Technica)

TechMeme

Oct 21

PHP readies emergency patches for two critical RCE flaws

Google News Technology

Oct 21

PHP Emergency Patches for Two Critical RCE Flaws

Google News Technology

May 13

Ondřej Surý's PHP Patches Helped Avert a Cyber Crisis

BBC Tech

PHP

Timeline

OpenAI Models Find Critical PHP Vulnerabilities

Tech Life: PHP Crisis, AI Avatar and Supercomputer Q&A

CISA Orders Federal Patch for Exploited PHP Flaws

PHP vulnerability triggers global patch scramble

PHP2Shell Bugs Patched After Global Internet Scare

OpenAI's Project Daybreak Uncovers PHP2Shell RCE Bugs

OpenAI Tech Uncovers Long-Standing PHP Flaws

PHP Flaws Found by AI Trigger Global Cybersecurity Alert

NSA Warns: Patch Critical PHP Flaws or Take Systems Offline

OpenAI: GPT-5.6 Sol Finds 'Significant' PHP Vulnerabilities

PHP2Shell: AI-Found Bug Affects 70% of Sites

An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 (Dan Goodin/Ars Technica)

PHP readies emergency patches for two critical RCE flaws

PHP Emergency Patches for Two Critical RCE Flaws

Ondřej Surý's PHP Patches Helped Avert a Cyber Crisis

Shows up with