Critical vulnerabilities in the PHP programming language have been discovered, impacting approximately 70% of the world's websites. These vulnerabilities have existed for over a decade and pose significant risks, including the potential for cybercriminals to take control of systems, alter websites, and steal confidential information.

Trend Micro has confirmed that these vulnerabilities are being actively exploited on multiple servers in Japan. A cyberattack has already compromised 25 systems across Korea, the United States, Japan, and Taiwan. Hackers suspected of links to China exploited a flaw in PHP to take full control of servers in these countries.

The hackers seized full control of 24 firewalls. The vulnerabilities allow hackers to execute commands remotely without needing a password or any other form of verification.

In response to the situation, the PHP oversight organization has released security patches and urged immediate application. Japan's industry minister announced plans to establish a team of white-hat hackers to combat the rise in cyberattacks. Additionally, the Japanese government has alerted 1,000 business groups about the vulnerabilities to mitigate potential damage.