The US National Security Agency has issued a stark warning to organizations globally, urging them to prioritize immediate updates for the PHP programming language. The alert follows the discovery of two high-severity security vulnerabilities that threaten a significant portion of the internet’s infrastructure. Due to the widespread use of PHP in powering modern websites, the agency has emphasized the need for rapid remediation to prevent potential exploitation.

If your organization is unable to apply these security patches right away, the NSA strongly recommends taking affected websites offline to mitigate risk. According to the agency’s statement on X, these vulnerabilities are particularly dangerous because they frequently offer attackers a direct gateway into a server’s underlying file system or its sensitive database. Taking proactive steps now is essential to safeguarding data against these critical exploits.