Government agencies worldwide scramble to patch critical PHP vulnerabilities or take vulnerable systems offline as intelligence agencies issue urgent warnings.