PHP security flaws trigger global scramble; CERT-In flags vulnerabilities

The vulnerabilities, identified by researchers at Wiz Research and confirmed by Google Cloud security leaders, affect the way PHP processes certain inputs, potentially allowing attackers to execute malicious code on vulnerable servers. The flaws were uncovered using a combination of artificial intelligence models that scanned the language's core libraries for patterns of weakness. Once the issues were verified, the researchers worked with the PHP development team to release patches that address the problems and mitigate the risk of exploitation.

CERT‑In, the Indian government agency responsible for coordinating responses to cyber threats, quickly circulated an advisory to public and private sector entities. The notice outlined steps to apply the patches, recommended temporary workarounds, and urged administrators to review their server configurations. By issuing the alert, CERT‑In aims to reduce the chance of large‑scale attacks that could disrupt services ranging from e‑commerce platforms to government portals.

For Indian businesses, the incident highlights the importance of maintaining up‑to‑date software and adopting a proactive security posture. PHP remains a popular choice for web development in the country, powering many local startups and large enterprises. Failure to patch the vulnerabilities could expose sensitive data, affect customer trust, and lead to regulatory scrutiny under data protection laws. Organizations are therefore advised to prioritize the updates and conduct thorough testing before deployment.