Published 1 hour ago • loading... • Updated 9 minutes ago

AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk

On October 21, 2026, PHP released an emergency patch following the online leak of PHP2Shell proof of concept, as Cloudflare confirmed active exploitation of the critical vulnerabilities.
Two critical RCE vulnerabilities, CVE-2026-109618 and CVE-2026-109619, impact PHP versions from 5.4 up to 8.5, each carrying a critical 9.2 CVSS v4.0 score.
Official patches for PHP are only provided for supported versions including 8.2 and newer, while older versions like 8.1, 7, and 5 will not receive updates; current WAF rules offer no protection.
Aikido is working on releasing pre-patched base images to streamline deployment, but one must immediately apply security updates once published to secure Web applications.
Security teams should perform post-patch forensics on logs back to June 2026, specifically looking for Web shells, modified files, unauthorized admin users, and anomalous outbound connections.

Insights by Ground AI

209 Articles

The Register

Center

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

Websites down as precaution as exploits have already been published

25 minutes ago·London, United Kingdom

Read Full Article

ARY News

Lean Right

Cyber agency warns websites may go dark

Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities.

29 minutes ago·Pakistan

Read Full Article

Polygon

Lean Left

The Entire Internet Is Officially In Crisis Mode Today

Websites and services ranging from Spotify to WordPress are all at risk thanks to a massive PHP security breach with horrifying implications

34 minutes ago·New York, United States

Read Full Article

Business Times

Lean Right

Government websites in Europe go dark as software flaw sparks security scramble

Dutch and Finnish agencies have gone offline amid reports of hackers exploiting weaknesses Read more at The Business Times.

44 minutes ago·Singapore, Singapore

Read Full Article

Svenska Dagbladet

+7 Reposted by 7 other sources

Lean Right

Security Holes Cause Authorities to Shut Down Websites

Several countries, including Finland, Denmark and the Netherlands, have closed several of their government websites on Wednesday afternoon after a serious security flaw was discovered.

46 minutes ago·Stockholm, Sweden

Read Full Article

CTV News

Center

European government websites go dark as software flaw sparks security scramble

Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators scrambling to protect their systems.

47 minutes ago·Toronto, Canada

Read Full Article

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/year