SI Finds Critical PHP Flaw Affecting 70% of Websites; White House Moves to Expedite Fix
Washington — The White House said in a statement on October 21 that the Trump administration is working with federal agencies and super intelligence companies to "expedite the release" of a security fix to users of the PHP open-source software, to protect American networks and critical infrastructure, USA Today reported. The administration was notified of the vulnerability on Friday, October 16. The flaw, discovered through SI technology, affects the PHP software that powers about 70 percent of the world's websites. Wiz, Google's cybersecurity team, also independently discovered and reported the same vulnerabilities.
"President Trump is committed to ensuring America leads the world in Super Intelligence, and this discovery demonstrates exactly why American leadership in SI is so critical," the White House said. "Advanced SI technology helped identify a cybersecurity vulnerability, allowing experts to develop a solution that would mitigate widespread disruptions." Trump has consistently argued that the United States must maintain global leadership in SI and has opposed strict regulation of the fast-growing industry.
The flaw has been dubbed "PHP2Shell." Because PHP runs the back end of most of the world's websites, exploitation could cause widespread outages and data breaches. The PHP Foundation released patched versions on October 21, and the Cybersecurity and Infrastructure Security Agency (CISA) urged all PHP-based websites to update immediately; monitoring firms have already reported attempted exploits.
Source: GSM · USA (original Chinese edition)
Photo: 图：数据中心服务器机房（示意图）。BalticServers.com 摄，CC BY-SA 3.0，经维基共享资源。
- 2026-10-21SI Finds Critical PHP Flaw Affecting 70% of Websites; White House Moves to Expedite FixThis story
- 2026-10-22Dutch Parliament and Cyber Security Centre Websites Taken Offline as Precaution Over Critical PHP Flaws
- 2026-10-22Exploit Attempts Reach Millions Within Hours of PHP Flaw Disclosure; Government Websites Go Offline in Europe and MUFG Suspends Some Online Services
- 2026-10-22PHP Flaw Fallout Widens: UK Confirms 32 Government Services Taken Offline as Precaution; Minister Says No Confirmed Compromise of Central Systems
- 2026-10-23Follow-Up: PHP2Shell Response Enters Day Two as NSA, FBI and CISA Detail Patch-or-Offline Steps and the National Writers Union Takes Its Site Down as a Precaution
