Morning Briefing
A critical vulnerability in PHP — the language powering roughly 75% of the web — has triggered a rare global cybersecurity scramble, with governments and major cloud providers racing to patch systems before mass exploitation begins. AI tooling surfaced the long-hidden flaws, and Amazon confirmed it was already seeing active probes before the public warning dropped. This one has real teeth.
What Matters Today
- PHP zero-days spark global patch emergency: Critical vulnerabilities discovered in PHP (think WordPress, Laravel, half the internet) have sent governments and enterprises into emergency patching mode. The UK is still mapping its exposure, and Amazon says attacks started before the disclosure — never a good sign. BBC Tech
- Australia's economy heading for a rough patch: Treasurer Jim Chalmers is flagging higher unemployment and weaker growth in the upcoming mid-year budget update. Treasury is revising all forecasts downward — brace for a grim MYEFO. Guardian AU
- Snowy Hydro 2.0 blows out to 12x original cost: The flagship energy project now costs twelve times its initial estimate and won't be done until 2029. The CEO's "could have been worse" defence is not the vibe you want on a nation-building project. Guardian AU
- International students in limbo over Labor visa changes: Thousands of international students — many mid-degree — face visa expiry before course completion after sudden policy shifts. The human cost of the migration crackdown is landing hard. Guardian AU
- PHP cybersecurity flaw: governments have 500 new vulnerabilities: The UK's AI minister confirmed AI scanning of government systems turned up 500 previously unknown vulnerabilities alongside the PHP crisis. Useful admission; terrifying context. BBC Tech
- Musk eyes SpaceX–Tesla mega-merger: Elon is floating the idea of combining SpaceX and Tesla in what would be the largest corporate merger in history. Whether it's genuine strategy or attention arbitrage, it'll move markets. BBC Tech
- Alan Jones trial, week 11: The alleged victim's mother wept on the stand, telling the court she had "trusted" Jones with her then-teenage son. The trial continues to produce difficult, significant testimony. Guardian AU
Markets
It's a sea of red offshore while the ASX is somehow holding up — the S&P 500 dropped 1.3% but the NASDAQ got absolutely smoked, down 4.5%, with the Nikkei falling 3.25% in sympathy. The PHP vulnerability news and macro jitters around growth forecasts are weighing on tech names hard. The AUD is down 1.36% to 0.702 against the USD — not helping import costs — and gold shed a sharp 7.7%, which is unusual and suggests some forced deleveraging or risk-off repositioning rather than a clean flight-to-safety move. Crypto is ugly: Bitcoin off 5.8% and Ethereum cratering 13.6%, which points to broader risk appetite collapsing rather than any crypto-specific catalyst.
Worth a Read
- What is PHP and why did it spark a global cybersecurity scramble? — BBC Tech's explainer is worth your time if you're in tech and need to brief non-technical stakeholders today. The AI-discovered-the-bug angle is the real story inside the story.
- Snowy Hydro 2.0: from $2B to $24B+ — Guardian's piece on the cost blowout is a masterclass in how major infrastructure projects die by a thousand scope changes. Essential reading if you care about Australia's energy transition timeline.
- Ali G: Who Iz I? — Guardian review — Sacha Baron Cohen is back and apparently as chaotic as ever, with a Republican politician already threatening to sue. If you grew up with Ali G, this weekend watch is locked in.
- The great moth revival: bogong moths bounce back — A genuinely good-news science story with an animated population map. Bogongs are culturally significant and ecologically important — their comeback is worth two minutes of your morning.