LYNSEY CHUTEL, AMELIA NIERENBERG, BRIAN O. OTIENO2026年10月23日荷兰首相罗布·耶滕上周在布鲁塞尔。他表示,内阁正密切关注PHP漏洞引发的网络安全隐患。 Geert Vanden Wijngaert/Associated PressJapan’s prime minister. A hospital in Germany. Taxpayers in France. An I.T. firm in Kenya.日本首相。德国一家医院。法国纳税人。肯尼亚一家IT公司。People’s online routines were disrupted around the globe on Wednesday and Thursday as governments and companies rushed to protect their websites, after security researchers found major flaws in a widely used programming language called PHP.周三和周四,全球各地人们的网络日常被打乱。安全研究人员在一款广泛使用的编程语言PHP中发现了重大漏洞,各国政府和公司随即匆忙保护自己的网站。Many took their websites down as an emergency precaution while they fixed the flaw, which was identified using artificial intelligence. A fix was quickly available, and software developers and tech departments from Helsinki to New York scrambled to apply it, meaning that in many cases the outages lasted less than a day.为了以防万一,许多机构在修复漏洞期间将网站下线。该漏洞由人工智能识别发现。修复程序很快推出,从赫尔辛基到纽约,软件开发人员和IT部门争相安装,因此多数情况下服务中断不到一天。But the flaw and the temporary shutdowns it provoked showed how far-reaching potential cyberattacks could be — and how deeply the internet has embedded itself into our lives.但这个漏洞及其引发的临时关停表明潜在的网络安全攻击可能波及多远,也表明互联网已多么深入地嵌入我们的生活。In Finland, one of the most digitized countries in the world, the government’s public websites were temporarily shut down, forcing even basic tasks to pause.芬兰是世界上数字化程度最高的国家之一。该国政府的公共网站被临时关闭,连基本事务都被迫暂停。“It’s in the fabric of our society, a lot of these services,” said Kalle Pusa, 33, a software developer who is involved in Helsinki city politics. “And I think yesterday and today, a lot of the fabric was a bit ripped apart.”“它就在我们社会织体之中,许多这样的服务都是,”33岁的软件开发者、参与了赫尔辛基市政治的卡勒·普萨说。“我觉得昨天和今天,很多织体可以说是被撕开了。”Mr. Pusa was trying to arrange for the local garbage department to pick up an old couch. But that had to wait until the site was back online.普萨当时正想安排当地垃圾清运部门来收一张旧沙发,但只能等网站恢复。“It had very strange consequences,” he said.“这产生了非常奇怪的后果,”他说。The British government said that 32 of its services went down as a precautionary measure. In Germany, the websites of states and major cities like Berlin and Munich were affected. The Hannover Medical School assured users that its hospital had not been hacked.英国政府表示,作为预防措施,其32项服务下线。在德国,多个州以及柏林、慕尼黑等大城市的网站受到影响。汉诺威医学院向用户保证,其医院并未遭到黑客攻击。In Japan, Prime Minister Sanae Takaichi encouraged businesses to take down their sites, saying on social media that access to her official website had been briefly suspended until updates were installed.在日本,首相高市早苗鼓励企业将网站下线。她在社交媒体上表示,自己的官方网站一度被暂停访问,直至安装更新。In the Netherlands, several official websites were offline on Wednesday and into Thursday, including the country’s digital ID site, a portal that gives citizens access to government services, and a crime tip website.荷兰有多个官方网站周三至周四离线,包括该国数字身份网站、一个供公民访问政府服务的门户网站,以及一个犯罪举报网站。While recent data suggests that the use of PHP is waning, about 70 percent of all websites and web applications use it, by some estimates.尽管近期数据显示PHP的使用正在减少,但据一些估计,约70%的网站和网络应用程序仍在使用它。Matthew Prince, the chief executive of Cloudflare, a company that helps websites secure and manage their internet traffic, said that it saw “thousands of attempts to exploit” the flaw in the hours before it was publicly announced.Cloudflare是一家帮助网站保护和管理互联网流量的公司。其首席执行官马修·普林斯表示,公司在漏洞公开前的数小时内监测到“数千次利用尝试”。“That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,” Mr. Prince said in a social media post.“公告发布后的45分钟内,这一数字跃升至数万次,两小时内达到数十万次,如今已是数百万次,”普林斯在一则社交媒体帖子中说。Security researchers using OpenAI’s advanced A.I. models found the vulnerability, which could allow hackers to take control of servers, steal private data and deface websites, experts said.专家表示,安全研究人员使用OpenAI的先进AI模型发现了这一漏洞。它可能让黑客得以控制服务器、窃取私人数据并篡改网站。PHP, a decades-old language, is a critical ingredient in popular services like WordPress and Drupal. The nonprofit PHP Foundation released a patch Wednesday morning, and security experts said that correctly applying it should protect websites from harm.PHP是一门有数十年历史的语言,是WordPress和Drupal等流行服务的关键组成部分。非营利的PHP基金会周三上午发布了补丁。安全专家表示,正确安装补丁应能保护网站免受侵害。But fast-moving hackers could exploit the flaws if they are not fixed quickly enough.但如果修复速度不够快,行动迅速的黑客仍可能利用这些漏洞。“Any machine running this software — and there’s a lot of machines running this software — is vulnerable,” said Seth Kaufman, a software developer based in the New York area.“任何运行这款软件的机器——有很多机器在运行它——都是脆弱的,”纽约地区的软件开发者塞思·考夫曼说。Mr. Kaufman, who develops open-source software for museums and cultural organizations, said he used PHP because it is a simple, free coding language. It’s been around forever, he said, and some people in the coding community think it’s clunky. But mostly, he said, it works.考夫曼为博物馆和文化组织开发开源软件。他说自己使用PHP是因为它是一门简单、免费的编程语言。他说,PHP由来已久,编程社区有些人觉得它笨重。但他说,通常情况下它是好用的。“It does what it’s supposed to do,” he said. “It’s effective. So that’s why it’s still used everywhere.”“它能完成自己该完成的任务,”他说。“它有效。所以至今仍被广泛使用。”That much was evident in the diversity of websites that were taken down as businesses and authorities rushed to fix the flaw.从被下线网站的多样性上就能看到这一点:企业和政府部门都在争相修复漏洞。Anthony Wambua, who runs an I.T. firm in Nairobi, woke up early to do so. He worried that PHP was now “synonymous with serious vulnerabilities.”在内罗毕经营一家IT公司的安东尼·万布阿一早起来处理这件事。他担心PHP如今“成了严重漏洞的同义词”。In Kenya, which prides itself on its embrace of online services, Mr. Wambua and others worried that the government’s response was sluggish. “I am scared that given the slow speed at which our government moves some of their sites might still be hit,” he said.肯尼亚以拥抱在线服务为荣,但万布阿等人担心政府的反应迟缓。“我担心,以我们政府推进的速度,他们的一些网站可能仍会被攻击,”他说。In Britain, fans of the reality television show “The Traitors” were briefly met with a cutesy error message with a picture of knitted mice. In France, services on the official tax website had not yet been fully restored as of Thursday evening.在英国,真人秀节目《叛徒》的粉丝一度看到一个配有针织老鼠图片的可爱错误提示。在法国,截至周四晚间,官方税务网站的服务尚未完全恢复。While the temporary outage turned out to be a “road hump” for institutions with large I.T. departments, small businesses went dark for up to seven hours, said Alistair Gleaves, who provides communication services for small businesses.为小企业提供通信服务的阿利斯泰尔·格里夫斯说,临时中断对拥有大型IT部门的机构来说不过是个“减速带”,但小企业却断网长达七小时。Mr. Gleaves, who is based in Exeter, in southwest England, quickly warned his clients when news of the flaw broke late Wednesday. His own business suffered when third-party payment services went offline.格里夫斯住在英格兰西南部的埃克塞特。周三晚些时候漏洞消息传出后,他迅速通知了客户。他自己的业务也因第三方支付服务下线而受损。He saw a glimmer of hope: A.I. models had helped uncover the flaw. There has been a lot of concern that A.I. is “going to take over the world, it’s going to kill us all,” he said.他从中看到了一线希望:AI模型帮助发现了这个漏洞。他说,一直有很多人担心AI“将接管世界,将杀死我们所有人”。But here, he added, “it found the problem.”但这一次,他说,“它发现了问题。”Lynsey Chutel是《纽约时报》驻伦敦记者,负责报道非洲、中东和欧洲的突发新闻。Amelia Nierenberg是《纽约时报》记者,自伦敦报道国际新闻。翻译:经雷点击查看本文英文版。