Today in Focus PHP: Pretty Huge Problem with the internet – The Latest
41 snips
Oct 22, 2026 
Aisha Down, The Guardian’s global technology reporter covering cybersecurity and digital society, examines a critical PHP flaw threatening websites worldwide. She explains how premature disclosure sparked a frantic patching race, how attackers could hijack servers and steal data, and why outdated infrastructure leaves the internet exposed. She also explores AI’s growing role in finding vulnerabilities.
AI Snips
Chapters
Transcript
Episode notes
Why PHP Still Powers So Much Of The Internet
- PHP remains core internet infrastructure, telling websites what to do alongside JavaScript and other languages.
- Its decades-long presence makes a vulnerability potentially far-reaching rather than confined to one application.
A Leaked Vulnerability Triggered A Global Scramble
- Researchers found the flaw in August, but the planned private warning process broke down before patches reached websites.
- The intended fix resembled a coordinated update for the entire internet.
Early Disclosure Gave Attackers A Head Start
- A leaked video revealed the vulnerability before its official announcement, giving threat actors an unexpected head start.
- Attackers could exploit the flaw before organizations had time to apply the prepared patch.