Get all your news in one place.
100's of premium titles.
One app.
Start reading
The Conversation
The Conversation
Doug Jacobson, University Professor of Electrical and Computer Engineering, Iowa State University

PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat

PHP is a key building block of most websites. Richard Drury/DigitalVision via Getty Images

Governments and organizations around the world began scrambling on Oct. 21, 2026, to fix a vulnerability in software that runs their websites, a bug that could give hackers access to data and control of websites. The flaw in PHP, the programming language that powers much of today’s web, prompted urgent warnings from the U.S. National Security Agency, cybersecurity agencies and software vendors.

A researcher at Calif, a security research firm, found the flaw in August 2026 using an advanced artificial intelligence model from OpenAI. The firm alerted the nonprofit that manages PHP. However, word of the flaw leaked before the PHP organization released patches for its software, and according to Amazon Web Services officials, hackers began “broadly” attempting to exploit it.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.