'It's been relentless': IT workers scramble to fix PHP flaw described as worst crisis in years

IT professionals are struggling to manage a critical security vulnerability in the PHP programming language that affects millions of websites. The emergency has caused widespread exhaustion and operational challenges as administrators scramble to patch systems or take them offline.
Why it matters
PHP powers a massive portion of the global internet, making this vulnerability a significant threat to digital infrastructure and data security.
Figure caption, How did AI discover the internet's massive cyber-security risk?
Microsoft boss Satya Nadella says he has not seen anything like the PHP emergency "in a long, long time".
Referencing the ongoing global efforts to fix the critical cyber-security flaw in millions of websites, he told a conference "it was a long day and a long night, I know, for all the IT and security folks".
Other IT and cyber experts have told the BBC about their struggles in the last 48 hours, whose stories give us an insight into what it is like at the coalface of a major cyber emergency. But also highlight how misinformation and panic has made things a lot worse.
"It's been relentless," says UK-based system administrator Adam Mudd.
He said he had never had so many messages from people who were worried about their websites.
Headlinne story · 7 newsrooms
Global Websites Go Dark After AI Uncovers Critical Programming Language Flaws
What every outlet reported, where they differ, and how each framed it →
Also covering this story
One other newsroom covered this event. We read that version too.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in