Web Security Threat Expands – Could Affect Up to 70 Percent of the World's Websites

PHP is a programming language used widely to build websites and web services. It helps a site process requests, handle information, and generate pages that visitors can see. The article highlights its importance by reporting that PHP-related vulnerabilities could affect up to 70 percent of the world’s websites.

PHP usually works behind the scenes. A website may contain PHP code that tells the server what to do when someone opens a page. The PHP software interprets that code and helps produce the requested content. If the PHP software contains a critical security flaw, attackers may be able to misuse websites that rely on it.

The article reports two critical vulnerabilities in PHP. Updates fixing them were released on Wednesday at about 17:00 Finnish time. Organizations were urged to update quickly, and some temporarily shut down or restricted services as a precaution. The article does not identify every affected website or report that most sites were attacked.

A software vulnerability is a weakness or mistake in a program’s design or implementation. Under the wrong conditions, an attacker may use that weakness to interfere with a service or access something it should protect. The article calls the two PHP problems critical, showing that they were considered serious enough to demand rapid action.

The connection is shared software. Many unrelated websites may run on PHP, even though their content and owners differ. A flaw in the common PHP component can therefore create risk for all sites using an affected version. This is why the article says the vulnerabilities could concern up to 70 percent of websites worldwide.

That figure describes possible exposure, not confirmed attacks. The article reports protective shutdowns and restricted traffic, but it does not say that 70 percent of websites were hacked. In Valtori’s case, the service interruption was explicitly not caused by exploitation or a data breach.

The article says the two critical PHP vulnerabilities could affect up to 70 percent of websites worldwide. This is a measure of potential reach. It reflects how widely PHP is used in website creation, not a count of confirmed attacks, compromised systems, or stolen data.

A website is potentially affected when it uses an exposed PHP version or service. Many sites can share the same underlying software while remaining separate services run by different organizations. A weakness in that common component can put many sites on the list for checking and updating. The article does not provide a precise number of affected sites.

There is also no claim that 70 percent of websites were actually hacked. Instead, organizations were urged to update, shut down, or restrict services until protection was in place. Valtori specifically said its interruption was a precaution and did not result from exploitation or a data breach. Other reported outages likewise show caution, not confirmed compromise.

Authorities recommended shutdowns or restrictions because organizations might not be able to install the PHP fix immediately. A vulnerable service remains exposed while it continues accepting internet traffic. Temporarily taking it offline or limiting incoming connections reduces the service’s exposure during the update period.

The article gives a concrete example from Finland. Valtori shut down public internet services in central government as a precaution and later began updating systems it maintained. It also restricted incoming internet traffic to some services. In the United States, the NSA advised PHP-using organizations to disable services if they could not update the software.

These actions were preventive, not proof of an attack. Valtori stated that the interruption was not caused by exploitation or a data breach. Other Finnish services, including the Helsinki Book Fair and the Finnish Film Foundation SES, also experienced outages. The immediate priority was to protect systems until the corrective updates could be installed.

A security patch is a software update designed to correct a known security weakness. It changes the affected program so that the flaw can no longer be used in the same way, or so that the risky behavior is handled more safely. Patches are part of normal defensive maintenance after a vulnerability is discovered.

For these incidents, PHP’s community published updates that corrected the two reported vulnerabilities. A website operator would install the appropriate update in the PHP software supporting the site, then verify that the service works correctly. Updating is important because simply knowing about a flaw does not protect a system. The vulnerable software must be replaced or corrected.

The article reports that the fixes were released on Wednesday at about 17:00 Finnish time. Until organizations could install them, authorities recommended taking services offline or restricting traffic. Updating reduces the specific risk described in the article, although the article does not claim that one update eliminates every possible website security problem.

When attackers exploit a web-server vulnerability, they may gain capabilities the service was not meant to provide. Depending on the flaw, possible damage includes changing or deleting website content, interrupting service, accessing protected data, or using the server to affect other systems. The exact outcome depends on the vulnerability and the server’s protections.

The source article does not describe a successful attack through these PHP flaws. It reports warnings, updates, shutdowns, and restricted traffic. Therefore, it would be inaccurate to claim that attackers stole data, altered sites, or took control of servers in this incident. Those are general security risks, not reported outcomes here.

The clearest example is Valtori’s statement that its service interruption was a precaution. Valtori said the outage was not caused by exploitation or a data breach. Its teams began updating maintained systems, while some incoming internet traffic was restricted. These steps aimed to prevent possible damage before normal access resumed.

A website’s code contains instructions for what the site should display or do. Some of those instructions are written in PHP. The web server receives a visitor’s request, such as opening a page, and passes the relevant PHP code to the PHP software for processing.

PHP interprets the instructions and can prepare the page’s content. It may combine the site’s code with information needed for that request. The web server then sends the resulting response to the visitor’s browser. In simple terms, the server delivers the request, PHP performs the programmed work, and the server returns the page.

This relationship explains why PHP security matters beyond one file or one website feature. A weakness in the PHP software can affect the processing layer used by many sites. The article reports two critical flaws and says up to 70 percent of websites could be affected. It does not describe the technical mechanism of either vulnerability, so the exact attack path is unknown from the source.