Update
PHP Vulnerability Threatens 70% of Websites
Two critical bugs in PHP, the language running most of the web, have been discovered. These vulnerabilities allow strangers to take over servers without a password. The patch is out, and attacks have already started. Governments, including Finland, the NSA, and the Netherlands, have recommended shutting down sites using PHP. The PHP Foundation has also raised the alarm, advising users to prepare for an update to address the two critical vulnerabilities rated CVSSv4 9.2.