Déborah Claude

Government agencies and companies around the world have shut down websites after two critical flaws came to light involving PHP, a programming language that is the basis for a large share of the internet. The US National Security Agency told organisations to patch immediately or pull vulnerable systems offline. The flaws "often provide a direct path to the server's file system or database," the NSA said in a statement on X. Attackers could use them to take over web servers without needing a password. PHP sits underneath popular web design platforms so the weaknesses potentially affect a vast range of websites, from online stores and news outlets to government services. The discovery came amid a surge in software security disclosures driven by increasingly powerful AI models, with the number of vulnerabilities found in 2026 on track to roughly double last year's record total. PHP volunteers have released a fix. "If you run PHP, it is imperative that you update now," the PHP Foundation, which funds developers working on the language, said in a blog post.

🇺🇸 ♾ ⚖️ Meta agreed to pay a coalition of US states as much as $16.7 billion and to impose sweeping new limits on how teenagers use Facebook and Instagram, according to a court filing on Wednesday that ends a landmark trial in California ➡️ u.afp.com/SVxX