Canadian government sites among those offline after flaw identified in widely used computer language

Read the original at CBC News ↗
Cite

Hughes, A. (2026, October 21). Canadian government sites among those offline after flaw identified in widely used computer language. CBC News. https://www.cbc.ca/news/business/canadian-government-sites-down-php-cybersecurity-9.7390368?cmp=rss

Dated from the outlet's own feed. Check the original for its byline.

CBC News · collected 2026-10-21 · by Abby Hughes

Quick Summary

Canadian government sites, including those of Newfoundland and Labrador, Prince Edward Island, and federal entities like Statistics Canada, were temporarily taken offline on Wednesday to address a newly discovered vulnerability in PHP, a widely used programming language. The PHP developers released urgent updates, advising all users to implement the fixes immediately due to potential security risks. This proactive measure was taken as PHP powers approximately 75% of websites whose programming languages are identifiable according to W3Techs.
Written locally by qwen2.5:14b on 2026-10-21, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

As of October 21, 2026, numerous major websites worldwide went dark temporarily due to critical vulnerabilities in PHP, a widely used programming language. Websites including parts of Wikipedia, Pinboard, Finnish government sites, and the Edinburgh council were taken offline to address security risks. The vulnerabilities could allow hackers to remotely execute code on servers, potentially compromising sensitive data. PHP powers nearly 70% of all websites, making this issue highly impactful. Developers released urgent patches, with cybersecurity experts urging immediate updates or site downtime as a precaution against potential exploitation by malicious actors.

Written for “Website Outages Due To PHP Vulnerability” on 2026-10-21, grounded in this article and the 6 other(s) covering the same event.
Why this leaning score
This article does not take a side on a contested political question, so it has no leaning score. That is an answer rather than a gap: a match report or a rescue can be warmly or critically written without being left or right, and scoring it anyway is how approval of a subject gets recorded as a political position.
No political leaning scored for article 97247 · logged 2026-10-21

Story

📰 Website Outages Due To PHP Vulnerability
Technology · 7 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 11% of its claims. Each row says how that neighbour differs.
The Straits Times
⚖️ leaning not scored 🔴 15% hedged 2 of 13 📰 publisher trust 60
“Both articles describe government websites going dark due to vulnerabilities in PHP on the same day with identical context.”
NBC News
⚖️ leaning not scored 🔴 15% hedged 2 of 13 📰 publisher trust 95
“Both articles describe a simultaneous global incident where websites went offline due to critical vulnerabilities in PHP on the same date.”
The Straits Times
⚖️ leaning not scored 🔴 15% hedged 4 of 26 📰 publisher trust 60
“Both articles describe government websites going offline due to critical vulnerabilities in PHP on the same day.”
Toronto Star
⚖️ leaning not scored 🔴 33% hedged 1 of 3 📰 publisher trust 63
“Both articles describe websites going dark due to a critical vulnerability in PHP on the same date.”
New York Post
⚖️ leaning not scored 🔴 33% hedged 3 of 9 📰 publisher trust 66
“Both articles describe the same incident of websites globally going dark due to a newly disclosed vulnerability in PHP programming language on the same date.”
BBC News
⚖️ leaning not scored 🔴 16% hedged 4 of 25 📰 publisher trust 69
“While both articles describe similar actions taken by multiple governments to address vulnerabilities in PHP, they do not specify that Canadian government sites are part of the SAME SPECIFIC set of offline websites mentioned (Finnish government, Edinburgh council, BBC).”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
18
sentences that state something as happening or true
Uncertain
11%
2 of 18 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
74/100
CBC News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
7
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

CBC News · 1434 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)

Who wrote this

Abby Hughes
15 article(s) here · 1 carrying a prediction
🔮 "The affected websites will be brought back online as soon as the fixes have been applied."
🔮 With a resounding vote in favour of Alberta staying in Canada, business leaders are breathing easier, saying the result of the provincial referendum will bring more certainty for investors and give a boost to the entire country's economy.
🔮 Will its self-driving cars be winter-ready?
🔮 Cybersecurity experts say it's a wake-up call Hackers may have targeted out-of-date firmware that remotely controls fridge temperatures
🔮 A handful of Canadian companies are racing to give the country its own way to space as quickly as possible — at the same time that some SpaceX customers worry the industry giant could soon give fewer rides into orbit.
🔮 Trump banning import of Canadian booze, motorcycles, other goods into U.S. The incoming U.S. import bans on Canadian alcohol, whey, molasses and motorcycles, by the numbers It leaves Lester with few options for his American consumers, since they wouldn't be able to take it back to the States with them even if they came to Canada to buy a bottle.
🔮 You can thank the 'winter blend' for that Gas prices fell 8 cents overnight and could dip by a few more still: expert Drivers rejoice: gas prices in Canada are dropping, thanks to a yearly switch.
🔮 Carney government introduces mega-deduction tax measure to spur more investment Announcement expands on previous tax deduction announced in last year's budget The government announced a major tax reform at the Canada Investment Summit that will allow businesses to write off investments in a number of sectors.
🔮 'Cool to be Canadian': Leaders optimistic their pitch to invest here will pay off Trade war with U.S. could help Canada as other countries seek new relationships
🔮 What will it take to land major deals at this week's summit?
Also by Abby Hughes
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 15 articles by Abby Hughes →

Topics

Artificial Intelligence Canadian Newfoundland and Labrador PHP the Canadian Centre for Cyber Security

Subjects

Canadian NORP · 3× Newfoundland and Labrador GPE · 2× Artificial Intelligence ORG · 1× CBC ORG · 1× CBC News ORG · 1× Evan Solomon PERSON · 1× Prince Edward Island GPE · 1× Solomon PERSON · 1× Statistics Canada ORG · 1× the Canadian Centre for Cyber Security ORG · 1×

Narrative

Developers behind the PHP programming language urging companies to implement a fix quickly Numerous websites, including Canadian government sites, went offline Wednesday in order to implement a fix after a vulnerability was found in PHP, a widely used programming language. PHP developers on Wednesday released urgent new fixes to vulnerabilities in their software, and encouraged website operators to implement the solution as soon as possible. "If you run PHP, it is imperative that you update now," the PHP Foundation said in a news release.
framing: assertive · carried by 1 article(s) · first seen 2026-10-21
🔮 "The affected websites will be brought back online as soon as the fixes have been applied."

Claims (18 extracted, 2 hedged)

Canadian government sites among those offline after flaw identified in widely used computer language asserted
flaw → identify → language
Developers behind the PHP programming language urging companies to implement a fix quickly Numerous websites, including Canadian government sites, went offline Wednesday in order to implement a fix after a vulnerability was found in PHP, a widely used programming language. PHP developers on Wednesday released urgent new fixes to vulnerabilities in their software, and encouraged website operators to implement the solution as soon as possible. "If you run PHP, it is imperative that you update now," the PHP Foundation said in a news release. asserted
Foundation → urge → release
Artificial Intelligence Minister Evan Solomon said some federal government websites had been taken offline temporarily as a "precautionary measure," and urged organizations whose websites run on PHP to implement the security update. asserted
websites → say → update
"We are taking this situation extremely seriously," Solomon said in a post on social media. asserted
Solomon → take → media
"The affected websites will be brought back online as soon as the fixes have been applied." asserted
fixes → bring → ?
The websites for the Canadian Centre for Cyber Security and Statistics Canada website appeared to be down for a period of time on Wednesday when CBC News attempted to access them. asserted
News → appear → them
The Newfoundland and Labrador government site was offline on Wednesday following a newly disclosed cybersecurity vulnerability. asserted
site → follow → vulnerability
The government sites for Newfoundland and Labrador and Prince Edward Island were also offline, displaying messages saying the shutdown was due to a global security incident. asserted
shutdown → display → incident
PHP is a language that dates back to the early 1990s and initially stood for "Personal Home Page." asserted
that → date → Page
It underpins huge parts of the public-facing web and is baked into sites like WordPress, Drupal, Joomla and Magento. asserted
It → underpin → WordPress
When a visitor loads a page that uses PHP, a server running the language assembles the content and sends it to the browser. asserted
server → load → browser
It is free, open source software, maintained by volunteers. asserted
It → maintain → volunteers
The flaw in PHP was discovered using artificial intelligence, Alphabet-owned cybersecurity company Wiz said in a blog post. asserted
Wiz → discover → post
The company said the vulnerable code had been present for more than a decade, and that they used multiple large language models to find the vulnerability and validate the patch for the problem while working with OpenAI on discovery and patching. asserted
they → say → discovery
They also co- asserted
They → co → ?
ordinated with Automattic, AWS, Microsoft and others on the rollout of the patch, so they could give guidance to customers that cannot implement the fix immediately. uncertain
that → ordinate → fix
PHP runs roughly 75 of websites whose programming language can be identified, according to web technology tracker W3Techs. uncertain
language → run → W3Techs
Elsewhere around the world, cybersecurity agencies in Europe, Australia, Japan and Britain also urged PHP users to make the fix, while governments in France, the Netherlands and other European countries proactively took their websites offline to make the fix. asserted
governments → urge → fix
💬Give feedback
🕘History 🎫Support