Critical PHP flaws trigger global patching race after AI discovery
Why it matters: Singapore and other governments warned the bugs affect all PHP versions, with widespread exploitation attempts already reported.
Critical flaws in PHP have triggered a worldwide rush to patch websites and apps after developers issued fixes on Oct. 21 for bugs that had sat in the code for years. Singapore’s Cyber Security Agency urged organizations to move quickly, warning that all versions of the scripting language are affected and that exploitation attempts are already widespread. Gwenda Fong, Singapore’s commissioner of cybersecurity and CSA chief executive, said companies should prioritize internet-facing systems and check services run by outside vendors. GovTech said it had no sign Singapore government systems were breached, though some services could be taken offline as a precaution. CNBC reported the vulnerabilities were uncovered with advanced AI tools, adding to wider concerns about AI’s growing cybersecurity impact.