PHP flaw hits 75% of identifiable websites; cybersecurity stocks rose nearly 8% intraday

A severe PHP vulnerability has triggered emergency patching and precautionary service shutdowns across government agencies, companies and website operators. PHP’s development team released fixes for two critical vulnerabilities and urged users to update immediately; the flaws can be exploited remotely without authentication. W3Techs data show PHP is used by about 75% of websites with identifiable server-side programming languages. Censys identified about 2.6 million PHP hosts, with roughly 1.5 million running versions that currently have no corresponding fix, including some versions no longer supported. The response has included temporary shutdowns and maintenance measures in several countries. The Netherlands’ National Cyber Security Centre shut its website, while other affected services included Rotterdam port, Overheid.nl, hospitals and political-party sites. Finland’s public government network services were shut preventively, and France’s Interior Ministry moved websites into maintenance. Japan’s Kyoto Bank suspended website updates and some online services from the evening of October 21. Amazon’s security team said its honeypots detected exploitation attempts on October 17, four days before public disclosure. In Tokyo trading on October 22, Trend Micro rose nearly 8% intraday, while other cybersecurity-related shares also drew attention as markets focused on demand for vulnerability detection, patch management and cloud-security services.