Story perspectives

U.S. Urges Immediate PHP Patching After Critical Flaws

By Drooid · Oct 24, 2026, 11:05 PM UTC · How we work

Summary

PHP Foundation Issues Patches

The PHP Foundation released emergency patches on October 21, urging worldwide updates.
AI models discovered critical PHP flaws that threatened 70% of websites.
U.S. agencies urged immediate PHP patching after the AI-discovered flaws.
The NSA and the UK’s National Cyber Security Centre issued alerts demanding rapid PHP remediation.
Cloudflare observed thousands of exploit attempts, rising to millions within hours after disclosure.

Summary

Tor Project Removes Relays

The governments of the Netherlands, Finland and Belgium took their public websites offline to avoid exposure.
The crisis earned the nickname “Black October” after an X post on Oct 22 called it the worst cybersecurity week.
Researchers reported that 333 Tor exit relays were hijacked in early October, exposing password-based SSH logins.
The Tor Project removed the compromised relays by 17:00 UTC on Oct 5 after detecting the intrusion.

History

Historical Context

In March 2017 Microsoft released emergency patches for the SMB flaw that the NSA’s EternalBlue exploit—leaked by the Shadow Brokers—had exposed. When the WannaCry ransomware spread on 12 May 2017, it infected over 300,000 computers in 150 countries until researcher Marcus Hutchins registered a kill-switch domain. The outbreak spurred global patch-deployment drives and legislative proposals such as the U.S. PATCH Act.

1 of 3

PHP Foundation Issues Patches

The PHP Foundation released emergency patches on October 21, urging worldwide updates.
AI models discovered critical PHP flaws that threatened 70% of websites.
U.S. agencies urged immediate PHP patching after the AI-discovered flaws.
The NSA and the UK’s National Cyber Security Centre issued alerts demanding rapid PHP remediation.
Cloudflare observed thousands of exploit attempts, rising to millions within hours after disclosure.

1 / 3