Razorpay warns PHP flaws could affect 70% of internet infrastructure in India

Razorpay warned that flaws in the PHP scripting language could potentially target roughly 70% of the internet. The issue is particularly acute in India, where legacy systems in banks, telecoms, and power sectors run on older, unfixable PHP versions. In response, banks have begun auditing applications and preparing backups, while officials have started patching official websites.

The widespread vulnerability poses risks, as personal data could be used to carry out social engineering attacks. The crisis forces institutions to manage operational risks and security costs, as banks take non-critical services offline. Razorpay noted that AI models are being used to identify and patch these security flaws at machine speed.