TechCrunch
US government says hackers are now exploiting critical PHP web bugs
Tuesday, October 27, 2026
The Cybersecurity and Infrastructure Security Agency warned that hackers are exploiting critical vulnerabilities in PHP, which is used in approximately 70 percent of web servers. The agency did not specify which particular PHP versions or vulnerabilities are being actively exploited or provide details on the scope of attacks. CISA advised developers and system administrators to apply available patches for affected PHP installations.
Original reporting:
