Half of Sites Using Vulnerable PHP Hard to Fix Due to Outdated, Unsupported Versions

Half of PHP sites are hard to fix

PHP is a tool that programmers use to build websites. A serious weakness, called a vulnerability, was found in it. The group that runs PHP has released a fix. But about half of the sites using PHP cannot easily install that fix, because they run old versions of PHP. Many of these sites are also 'dormant sites,' which have not been updated for a long time. Experts say these sites should be shut down quickly.

Key facts

• About 70% of websites in the world use PHP.
• About half of PHP sites cannot easily apply the official fix.
• Deloitte Tohmatsu Cyber estimated this number using statistics from W3Techs.com, a service that tracks website technology.
• Many sites run old PHP versions that no longer get support.

What is a dormant site?

A dormant site is a website that nobody has updated for a long time. Its owner may have forgotten it, but it is still online. Hackers can attack these sites because no one is watching them. This makes them a big risk when a new security problem appears.

Why this matters

Many websites could be attacked if they are not fixed. Some companies have already paused their sites to stay safe. Reports say attackers can use AI to find and attack weak sites very fast. Website owners need to check their sites and update or close the old ones right away.

What to watch

• Whether many old PHP sites are updated or shut down.
• Whether more companies pause their services to stay safe.
• Whether attacks on PHP sites increase.
• How cloud companies in Japan and abroad support their customers.