A critical security issue affecting the PHP programming language has emerged, putting approximately 70% of the world’s websites at risk. The vulnerabilities known as PHP2Shell involve two unpatched critical remote code execution flaws, which prompted emergency warnings from cybersecurity authorities, including the EU cybersecurity team. As a precaution, several governments, including Finland and the Netherlands, have taken their websites offline to mitigate potential threats. Leading internet services, including Cloudflare, have already begun deploying protective measures. PHP officials are urging website administrators to install emergency patches, with updates expected imminently. The urgency has escalated as attackers begin to exploit these vulnerabilities, leading to a race for system updates to avoid downtime. Cyber chiefs have issued stern warnings for sites to take immediate action or risk being taken offline.