In brief
A severe PHP vulnerability, dubbed "php2shell", has prompted governments and businesses worldwide to shut down services to mitigate the risk of unauthenticated remote code execution. The UK announced 32 services offline, while the National Cyber Security Centre reported no successful breaches but a growing urge for rapid patching. Major platforms from Wikipedia to Cloudflare suspended access or entered maintenance mode. Cyber‑security experts warn the window for exploitation is shrinking, calling for coordinated responses and resilience in people and technology.
On Thursday, a critical flaw in PHP—an open‑source server language that powers roughly 70% of the web—sparked an international scramble to isolate vulnerable servers. The vulnerability, labeled "php2shell" by the PHP Foundation, allows an unauthenticated attacker to run any code on a host unless patched.
The UK government confirmed that 32 services were taken offline while security teams examined the underlying code. Downing Street warned that other services might also be affected, and the Ministry of Defence outlined plan-to‑ship patches within 24 hours.
Cyber‑security experts said no financial or personal data had yet been compromised, but the rapid pace of exploitation—rising from thousands of attempts a day to millions within hours—means the window for response is narrowing. Matt Hull of NCC Group warned that attackers can now exploit a vulnerability in days or even hours, compared to the weeks it used to take.
Large traders of the web such as Wikipedia, Cloudflare, Amazon and telecom giant Orange suspended access or set their sites into maintenance mode. Mike Prince of Cloudflare noted a spike in attempts, while Amazon confirmed its sites remained online during the initial hours following discovery.
Olly Whitehouse, chief technology officer of the National Cyber Security Centre, called the incident "unprecedented" but emphasized that no successful breaches had been detected to date. He added that prompt patching and the sharing of vulnerability alerts were proving critical.
Cyber‑security specialist Rory Hopcraft urged the government to practise the safeguards they require others to follow, highlighting that “hacking is not new, but the speed at which vulnerabilities are exploited is.”
The incident underlines the need for continuous, coordinated patching across the internet's foundational infrastructure, and a renewed emphasis on resilience not just in technology, but also in the human teams that protect it.
Sign up for our Tech Decoded newsletter to stay on top of the world’s top tech stories and trends.
