GOVERNMENT WEBSITE OFFLINE
AI sharpens cat-and-mouse hacking battle as companies strengthen defences
From hacked supermarket fridges and a record cryptocurrency theft at Binance to an emergency over flaws in widely used web software, companies worldwide are facing a wave of cyber threats executives say AI is accelerating
Govt mulls giving Cert-In enforceable powers to mandate patching
Last month, two critical flaws in the PHP programming language, discovered with the help of AI, created worldwide panic as hackers targeted the vulnerabilities millions of times, and led to governments including the US, UK, France, Germany and Japan taking down public websites. PHP powers 69.3% of websites worldwide.
SGB premature exit date on November 2, 2026: Rs 1 lakh invested in this Sovereign Gold Bond grows to Rs 3 lakh in 5 years
The Reserve Bank of India has set the premature redemption price for Sovereign Gold Bonds. These bonds can be redeemed prematurely starting from November 2, 2026. The redemption price is calculated based on the average closing price of gold over the last three working days.
Gold bond turns Rs 1 lakh investment into Rs 3.76 lakh: Check SGB premature redemption date, price and other details
The Reserve Bank of India has announced that the SGB 2019-20 Series VI will be eligible for premature redemption on October 30, 2026. The redemption price is set at Rs 14,213 per unit, reflecting the average closing price of gold. Originally offered at Rs 3,785 per gram online, investors can expect a remarkable return of 275.51% on their investment, excluding interest.
What happened to the FEC website? Hackers disrupt campaign finance filings before US midterms
On October 26, just ahead of the US midterm elections, the Federal Election Commission encountered a significant outage in its electronic filing system, potentially due to a security breach by an unidentified source. This disruption prevented candidates from submitting vital campaign finance reports during a key spending period, raising concerns about the transparency of campaign funding.
Anthropic IPO rocks Indian IT; Why Walmart is in no hurry to list Flipkart
Anthropic’s US IPO filing sent Indian IT stocks lower on Tuesday. This and more in today’s ETtech Top 5.

Indian patch patrol sets out to resolve PHP risk
Two critical security flaws in PHP, the programming language underpinning an estimated 70% of the internet, have triggered emergency cybersecurity measures in India. Banks are auditing applications and preparing backups, while the government is patching official websites. Razorpay has deployed AI-led vulnerability detection and warned merchants about potential breaches.

Japanese companies compensate users as cyberattacks buffet economy
GMO Internet Group said customers would be compensated for losses stemming from unauthorised access following a cyberattack on its foreign exchange trading service, and all customers would receive 5,000 yen ($32) as "an initial gesture of good faith," CEO Masatoshi Kumagai said in a blog post on Sunday.

AI is finding software flaws faster, and so are hackers: Inside the PHP scramble
Governments and companies across Europe and Asia have taken services offline while they patch two vulnerabilities that researchers discovered with AI models, as exploitation attempts rise into the millions.

What to know about the AI-detected security bug impacting wide swaths of the internet
PHP is a widely used general-purpose scripting language that is geared toward web development, and thus, it powers the majority of websites around the world. When the organization behind the language and the FBI's cyber division warned Wednesday of significant vulnerabilities in the language, government agencies, corporations and other organizations were sent into a flurry.

More bugs out there: PHP2Shell is just the tip of the internet’s old-code iceberg
On Wednesday, critical vulnerabilities in PHP were publicly revealed, impacting a vast number of websites. The discovered flaws pose serious security risks, prompting urgent updates from website administrators. Many organizations swiftly shut down their services to mitigate potential breaches from the vulnerabilities. Experts emphasized the importance of identifying PHP versions and applying necessary patches immediately. They also recommended increased funding for PHP development to prevent future risks and ensure security.

PHP security vulnerabilities: Indian govt rushes to fix official websites, banks audit apps
Banks have begun auditing applications for weaknesses, taking some non-critical services offline and preparing backups to divert traffic if parts of their websites or mobile applications experience downtime, according to executives.

Rush is on to patch a software vulnerability that could impact 70% of websites worldwide
Many government sites appeared to be functioning normally Thursday, but outages or limited service continued while security work was under way.

What is a PHP vulnerability? Security flaws prompt shutdowns of major websites amid global cybersecurity response
Two critical vulnerabilities in PHP have prompted the shutdown of several websites across multiple countries. Cybersecurity teams are actively working to secure these potentially affected systems using emergency fixes provided by the PHP Foundation. Major organizations, including Wikimedia and government sites in Finland and the Netherlands, have taken precautions. Researchers utilized artificial intelligence to identify these security flaws, showcasing both its benefits and risks.

From eMudhra to PHP: Breach spree hits tech infrastructure, AI emerges as threat multiplier
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates and critical software vulnerabilities. A security breach at eMudhra impacted its global digital certificate business but was managed promptly. Additionally, critical vulnerabilities in PHP temporarily led to the shutdown of various websites for security updates. A supply-chain attack compromised the LiteLLM Python package, affecting its users significantly.

Explained: What is PHP and why did it take government websites offline?
The developers of PHP said on Wednesday they would release patches for two critical vulnerabilities, and EU cybersecurity officials warned organisations unable to apply the fixes to take affected websites offline. Here is what you need to know:

ETtech Explainer: How a flaw in PHP, the code behind 70% of websites, sent governments offline
Since PHP powers 70% of the world’s websites, the vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory, which may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself, as per Wiz Research.

Cloudflare sees millions of exploit attempts after PHP disclosure
Cloud services firm Cloudflare saw millions of exploitation attempts after the public disclosure of critical vulnerabilities in the widely used programming language PHP, CEO Matthew

Government websites in Europe, US go dark over AI-detected flaw in a web programming language PHP
The website of the Finnish government, for one, was only partly available Wednesday. A message to visitors said government websites were experiencing a temporary disruption and were fully or partially unavailable while the issue was being resolved.
Load More
