Yes. Even if you are not running PHP yourself, you should now prepare for:

- Any PHP site you ever put your email/password/personal data in being hacked over the next few hours (especially things like forums).

- As a result of the above, a massive wave of phishing attempts.

- Corporates/Admins panicking and turning off services as a precautionary measure over the next hours or days.

▲

thombles an hour ago | parent | next [-]

It's not really panicking when CERT-EU is literally suggesting this (in the comment text of this story)

	▲	sparkling an hour ago \| parent [-]
		Sure, im referring to systems being turned off even if they are not running PHP at all. Out of fear of spillover effects or because they are unsure what they are running.

▲

jacquesm 41 minutes ago | parent | prev | next [-]

That's not panicking.

What else do you expect them to do? Pray?

Switching something off is far preferably over being hacked.

	▲	nr378 35 minutes ago \| parent [-]
		Agree, I think switching off any running PHP services at the power socket is a pretty rational response at this point.

▲

Gigachad an hour ago | parent | prev [-]

It’s probably advisable to go through your password manager and start deleting any accounts you no longer use. And of course make sure that you have zero shared passwords