Critical PHP Flaws Forces Governments to Pull Sites Offline
The Facts
- The developers of PHP, a programming language commonly used on websites, have released emergency updates Wednesday for two critical vulnerabilities which can allow unauthenticated remote code execution. PHP powers web publishing platforms such as WordPress.
- Government agencies in the Netherlands and Finland took websites offline as a precaution, while France's Interior Ministry pulled prefecture sites offline. Germany's digital ministry said IT provider ITZBund deactivated several sites preventively.
- The FBI's cyber division and the National Security Agency warned Wednesday that the flaws could allow remote code execution, urging operators unable to patch to take systems offline. A White House official said the U.S. was coordinating with tech firms.
Sources Split
LEFT
CENTER
RIGHT
+4
+1
+2
+1
+2
ESTAB
CRIT
CENTER
PRO
ESTAB
The Spin
Pro-industry narrative
Frontier AI just did what a decade of human review couldn't: dig out memory-safety rot buried deep in the engine running most of the web and get it patched before anyone weaponized it. Pairing those models with expert human review and coordinated disclosure means maintainers get fixes and not just a flood of bug reports. That's defense winning the race, and it's only getting faster.
Industry-critical narrative
This episode shows where AI is taking security. Finding weaknesses in software is now fast and cheap, while fixing them across millions of sites stays slow, so ordinary criminals gain powers once held by spy agencies. The only defense on offer is to rely on a few AI companies to guard everyone, which puts the public's security, and the power that comes with it, in their hands.
