India, Oct. 24 -- PHP, a programming language used to build websites, is at the centre of a major security concern after researchers uncovered two critical flaws that could let hackers take control of vulnerable servers.

Called PHP2Shell, the vulnerabilities could let attackers run malicious code on affected systems without needing to log in. Since the vulnerabilities lie in PHP itself rather than individual websites built on it, businesses cannot rely on website-level security measures alone to stay protected.

The vulnerabilities affect specific PHP versions, and fixes were released on October 21, 2026. Businesses must now check whether they are running affected versions, install the updates and investigate whether hackers exploited th...