Governments and organizations worldwide scrambled on Thursday to address critical security vulnerabilities found in the PHP programming language, which supports a significant portion of internet infrastructure. The urgent response followed the release of patches by PHP developers after several long-standing flaws were identified, reportedly through the use of artificial intelligence, prompting widespread hacking attempts.
The discovery led to precautionary measures including temporary shutdowns of websites and online services across multiple sectors such as banking, transportation, and government. Notably, in Japan, major firms including Nomura Holdings, Mitsubishi UFJ Financial Group, All Nippon Airways (ANA), and East Japan Railway suspended certain internet operations as part of emergency security protocols. Asahi Group Holdings and Tokio Marine Holdings also restricted access to selected websites while assessing potential impacts. Government agencies, including Japan’s Ministry of Finance, Meteorological Agency, and National Tax Agency, partially or fully took down online services to implement safeguards.
The aggressive patching efforts underscored the reliance of public and private entities on legacy software components like PHP, which along with HTML and Python, constitutes a fundamental element of the web. Microsoft CEO Satya Nadella described the incident as unprecedented in scale, highlighting the challenges of securing complex digital systems in an evolving cybersecurity landscape.
Similar precautions were observed in Europe as France’s telecom operator Orange temporarily blocked access to certain PHP-based applications across multiple subsidiaries. In Finland, state IT service provider Valtori halted government public web services before gradually restoring them following security updates, noting that full recovery could extend over days or weeks due to necessary testing. Valtori affirmed that the service interruptions were precautionary and not triggered by active exploitation of the vulnerabilities.
In China, the Ministry of Industry and Information Technology urged enterprises to thoroughly inspect their systems and update to the secure PHP versions, while advising enhanced cybersecurity monitoring and the revocation of compromised credentials where applicable. The response in South Korea included elevating the private sector’s cybersecurity alert level and the activation of emergency measures to deter exploitation attempts.
Cybersecurity experts pointed out that smaller organizations, as well as those operating older versions of PHP with no available security patches, may face prolonged updates and remediation processes. Felix Kuhlenkamp, head of security at the German digital industry association Bitkom, noted that while many large operators had already applied fixes, maintaining vigilance and up-to-date software remains a critical challenge for others.
The incident has prompted a global reassessment of cybersecurity readiness, demonstrating how foundational programming components remain a potential vulnerability hotspot even decades after their initial development. Meanwhile, cloud service providers such as Tencent Cloud have urged customers to upgrade PHP immediately, without mandating broad shutdowns, indicating a varied approach depending on regional threat assessments and infrastructure resilience.