A newly discovered vulnerability in PHP, software used by millions of websites worldwide, could see unsuspecting Kiwi businesses unwittingly providing cybercriminals with infrastructure to host illicit dark web content.