By Pascal Ndegwa - Reporter
Loading article content...
Loading article content...
U.S October 21, 2026 - The U.S. National Security Agency has given a strong warning to people and companies that use PHP. PHP is the computer language that runs a big part of the world’s websites.
The agency says two serious security problems have been found in PHP. These problems can let bad people take control of a website without needing a password. Once inside, they could reach important files or private information stored on the server.
The NSA says organizations should update their PHP software as soon as possible. If they cannot update right away, the agency recommends turning the website off until the problems are fixed. The NSA also said it will share more detailed advice soon.
On the same day the warning came out, the people who take care of PHP released special fixes for the newest versions of the software. Older versions of PHP will not get these official fixes.
Security experts and other government groups are also telling website owners to act fast. Some early attacks using these flaws have already been seen. Anyone who runs a website that uses PHP should check their software and apply the new updates without delay.