Front-line IT and cyber experts have told the BBC they have been working non-stop over the past 48 hours to update and secure systems that use PHP, saying the experience has been exhausting.
"It's been relentless," one worker said, encapsulating the round-the-clock effort to identify affected systems, deploy updates and test configurations to ensure business continuity.
Operational pressures
Those on the front line described a familiar pattern for emergency security responses: triaging systems to prioritise critical public-facing services, coordinating with vendors and development teams, and balancing the speed of deployment against the need to validate patches do not break applications. For many organisations the work involved not just applying an update but also running regression tests and rolling changes out across complex environments.
Broader implications
Security teams emphasised the strain such incidents place on small operations and on IT staff who must juggle routine maintenance with urgent remediation. The episode highlights the ongoing challenges organisations face in maintaining secure software supply chains and the importance of rapid, well-coordinated responses when potential vulnerabilities are identified.
What comes next
Experts told the BBC they expect a period of continued vigilance as teams confirm their environments are fully protected and monitor for any follow-up issues. They also urged organisations that rely on PHP to review their systems and make sure updates have been applied where required.