Tech Giants and Global Agencies Respond as Critical PHP Flaws Trigger Exploitation Attempts

Major technology firms including Amazon, Alphabet's Google, OpenAI, and Cloudflare are responding to two critical PHP vulnerabilities designated 'PHP2Shell' after Amazon detected pre-disclosure exploitation attempts via its MadPot system. PHP powers around 70% of the web and over 33 million sites, with flaws dating back to 2004 allowing remote code execution and server breaches. The vulnerabilities were discovered using AI models, prompting patches up to PHP version 8.5.12 coordinated over two months. Global cybersecurity agencies across the U.S., UK, EU, Canada, Singapore, and Australia have issued urgent warnings, with the NSA advising unpatched servers be taken offline.