‘Limited’ Government services temporarily offline amid PHP cybersecurity issue

Read the original at Evening Standard ↗
Cite

Wingate, S. (2026, October 22). ‘Limited’ Government services temporarily offline amid PHP cybersecurity issue. Evening Standard. https://www.standard.co.uk/news/tech/government-downing-street-work-press-association-b1301916.html

Dated from the outlet's own feed. Check the original for its byline.

Evening Standard · collected 2026-10-22 · by Sophie Wingate

Quick Summary

A critical security flaw in the programming language PHP has led to some limited government services being temporarily offline while fixes are implemented. The UK government spokesperson confirmed on Thursday that no major public-facing critical services have been affected but acknowledged potential exposures and ongoing work with international partners to address the issue. While there is no indication of a breach, the government declined to disclose which specific services may be impacted due to it not being standard practice.
Written locally by qwen2.5:14b on 2026-10-22, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

As of October 21, 2026, critical vulnerabilities in the PHP programming language prompted websites across Europe and the US to go dark temporarily. The flaws carry a severity rating of 9.2 out of 10 and could allow hackers to remotely execute code on web servers. Websites such as Pinboard, parts of Wikipedia, and government sites in Finland and the Netherlands were among those taken offline. In response, PHP developers released emergency security patches, urging all users to update their systems immediately. The FBI and NSA also warned about the risks, advising operators to take websites offline if immediate updates weren't possible. Cloudflare reported detecting attacks exploiting these vulnerabilities.

Written for “Global PHP Security Flaw” on 2026-10-22, grounded in this article and the 16 other(s) covering the same event.
Why this leaning score
This article does not take a side on a contested political question, so it has no leaning score. That is an answer rather than a gap: a match report or a rescue can be warmly or critically written without being left or right, and scoring it anyway is how approval of a subject gets recorded as a political position.
No political leaning scored for article 98918 · logged 2026-10-22

Story

📰 Global PHP Security Flaw
Technology · 17 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 14% of its claims. Each row says how that neighbour differs.
Daily Mail · 0.96 cosine similarity
⚖️ leaning not scored 🔴 22% hedged 8 of 36 📰 publisher trust 64
“Both articles describe the same PHP cybersecurity issue affecting limited UK government services on the same day.”
CBC News
⚖️ leaning not scored 🔴 11% hedged 2 of 18 📰 publisher trust 74
“Both articles describe Canadian government sites going offline to implement a fix for a vulnerability in PHP on the same day.”
Al Jazeera
⚖️ leaning not scored 🔴 10% hedged 2 of 21 📰 publisher trust 60
“Both articles discuss the temporary shutdown of government websites due to a security flaw in PHP on the same date.”
Dawn
⚖️ leaning not scored 🔴 28% hedged 7 of 25 📰 publisher trust 71
“Both articles discuss a critical security flaw in PHP that led to websites and government services potentially going offline on the same day.”
Evening Standard
⚖️ leaning not scored 🔴 25% hedged 6 of 24 📰 publisher trust 65
“Both articles discuss the same critical security flaw in PHP that led to websites and government services temporarily going offline on October 22, 2026.”
Euronews
⚖️ leaning not scored 🔴 16% hedged 3 of 19 📰 publisher trust 60
“Both articles describe the same specific incident of critical security flaws in PHP causing organizations worldwide to take action on October 22, 2026.”
NBC News
⚖️ leaning not scored 🔴 15% hedged 2 of 13 📰 publisher trust 95
“Article A reports immediate effects of the vulnerabilities on specific websites and systems as of Wednesday morning, while Article B discusses actions taken by UK government organizations in response to the issue on Thursday.”
BBC News
⚖️ leaning not scored 🔴 16% hedged 4 of 25 📰 publisher trust 69
“While both articles discuss a cyber-security update for PHP affecting websites globally, they describe different time points in the process: Article A covers the initial shutdowns and warnings, while Article B reports on the situation a day later with an official statement confirming limited impact.”
The Straits Times
⚖️ leaning not scored 🔴 15% hedged 4 of 26 📰 publisher trust 68
“While both articles discuss a cybersecurity issue related to PHP affecting government websites, Article B refers to updates or developments that occurred on a different day (2026-10-22), suggesting it covers subsequent actions rather than the original incident described in Article A.”
Toronto Star
⚖️ leaning not scored 🔴 33% hedged 1 of 3 📰 publisher trust 63
“While both articles discuss a similar cybersecurity issue with PHP, Article A focuses on warnings issued by U.S. agencies and operators taking websites offline, whereas Article B covers actions taken in the UK government context.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
7
sentences that state something as happening or true
Uncertain
14%
1 of 7 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
65/100
Evening Standard's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
17
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-22 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Evening Standard · 6493 article(s) · 56 correction(s) detected
Running correction rate · 56 correction(s)

Who wrote this

Sophie Wingate
25 article(s) here · 1 carrying a prediction
🔮 “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from escalating strikes from the Iran-backed militant group.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from escalating strikes from the Iran-backed militant group, as the UK extends its military support to the kingdom.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from strikes from the Iran-backed militant group, as the UK extends its military support to the kingdom.
🔮 And as I said to Secretary Hegseth, in the words of Saint Francis of Assisi, ‘Where there is discord, may we bring harmony.’
🔮 The TUC called for an even bigger surcharge increase, to 16%, saying that could raise £24 billion in tax revenues over four years.
🔮 The clip on social media, set to upbeat music, shows the two Cabinet ministers sampling local foods while riding the three-wheeled vehicle popular with tourists to Thailand.
🔮 And as I said to Secretary Hegseth, in the words of Saint Francis of Assisi, ‘Where there is discord, may we bring harmony.’
🔮 The Home Office declined to comment on individual cases, but said: “Our thoughts remain with the family and friends of Henry Nowak, whose life was cruelly cut short in a horrific act of violence. “We will always seek to deport foreign criminals at the first opportunity.”
🔮 The Government will invest £33 million alongside funding from Bristol Myers Squibb, GSK and Gates Ventures to help recruit more people for clinical studies.
Also by Sophie Wingate
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 25 articles by Sophie Wingate →

Topics

Cloudflare Government No 10 OpenAI

Subjects

Government ORG · 2× Cloudflare ORG · 1× No 10 ORG · 1× OpenAI ORG · 1×

Narrative

The official told reporters: “Work has already taken place across Government to identify and fix potential exposures to our systems, and our experts are continuing to work closely with both OpenAI and international partners on this issue.
framing: assertive · carried by 1 article(s) · first seen 2026-10-22
🔮 “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.

Claims (7 extracted, 1 hedged)

Organisations around the world have been scrambling to fix a critical security flaw in the programming language PHP used by the majority of websites. asserted
Organisations → scramble → websites
No large UK public-facing critical services have been affected, a No 10 spokeswoman said on Thursday. asserted
spokeswoman → face → Thursday
The official told reporters: “Work has already taken place across Government to identify and fix potential exposures to our systems, and our experts are continuing to work closely with both OpenAI and international partners on this issue. asserted
experts → tell → issue
“No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out. uncertain
work → face → exercise
“But this does not mean they were hacked, and work continues to resolve any issues.” asserted
work → mean → issues
The spokeswoman said it was not “standard practice” to provide a list of Government services that were affected. asserted
that → say → services
It came after cybersecurity chiefs warned UK organisations on Wednesday that a “critical security issue” had been discovered in PHP, which is used by almost 70% of websites according cybersecurity firm Cloudflare. asserted
which → come → Cloudflare
💬Give feedback
🕘History 🎫Support