PHP vulnerabilities are fueling the Black October crisis, causing outages and hacking attempts affecting major US services like American Express.

The entities involved

• PHP →

  scripting language focused on web development

  • US agencies, including the NSA, CISA, and FBI, issued advisories regarding vulnerabilities in the PHP programming language.Tue 04:04
  • AI firms Anthropic and OpenAI commented on global cyber risks stemming from PHP vulnerabilities, involving Palo Alto-based Abliteration.Sat 04:39
• American Express →

  American multinational financial services corporation

  • American Express partnered with Aspire to create a co-branded lounge on September 4, 2025.Tue 13:56
  • Walmart, Google, and American Express are all being affected by the shift toward agentic commerce.Tue 01:17
• Cloudflare →

  American internet infrastructure and website security company

  • Matthew Prince and Michelle Zatlyn are identified as co-founders of Cloudflare.Mon 22:50
  • Cloudflare reported early attacks targeting PHP vulnerabilities.Mon 21:47

Related events

• PHP vulnerabilities led to exploitation attempts affecting government websites across Europe, prompting service suspensions.Oct 22
• PHP vulnerabilities led to exploitation attempts, prompting financial institutions and government ministries to suspend services.Oct 22
• Government of Canada sites were affected by PHP vulnerabilities identified by the EU Agency for Cybersecurity.Oct 22
• A PHP vulnerability is impacting the operations of Amazon, OpenAI, Cloudflare, and Google, causing Nasdaq volatility.Oct 23
• GoDaddy, a web hosting provider, is affected by PHP flaws that were discovered through research involving OpenAI.Oct 21