Governments and businesses worldwide rushed to patch two critical PHP security flaws after hackers attempted to exploit them before defenders were alerted. Singapore Commissioner of Cybersecurity Gwenda Fong urged organizations to fix the vulnerabilities immediately, warning they could let attackers take over web servers, steal data or disrupt services without login credentials. Amazon’s security team found an exploit attempt on October 17.
WHO:Governments and businesses worldwide; Singapore Commissioner of Cybersecurity Gwenda Fong; Amazon’s security team
WHAT:Governments and businesses rushed to patch PHP vulnerabilities after hackers attempted to exploit them.
WHEN:Oct 17, 2026
WHERE:Singapore
WHY:The flaws could allow attackers to take control of web servers, steal data or disrupt services without login credentials.
