Japan Took Sites Offline Over PHP Flaw, US Did Not; Vulnerability Found in August

What happened

A serious security weakness was found in PHP, a tool that websites use to work. Many Japanese companies temporarily stopped their websites to stay safe. In the United States, where the problem began, most companies kept their sites running. Big tech firms worked closely with the government to respond.

Key facts

• PHP is used by about 70% of websites in the world.
• The weakness was found in August.
• Amazon asked its cloud customers to update PHP to the newest version right away.
• Amazon also asked them to check for any suspicious network activity.
• Shares of Trend Micro, a cybersecurity company, rose as much as 7.8% at one point.

What is PHP?

PHP is a programming language. Programmers use it to build websites, and many websites run on it. When a flaw, or bug, is found in such a tool, attackers may try to use it to break into websites. A flaw like this is called a vulnerability.

Why it matters

Because so many websites use PHP, a single flaw can affect a huge number of sites. The story also shows a difference in how countries respond. Japanese companies chose to pause their sites, while many U.S. companies kept running, supported by close teamwork with the government.

What to watch

• Whether more companies update PHP and check their sites for attacks.
• Whether attackers use the flaw on sites that are not being watched, often called dormant sites.
• How AI tools change the speed at which flaws are found and used.