Technology

Critical PHP Security Flaw Affects Websites

21 Oct to 22 Oct

13 outlets

Each outlet's article on this story, most articles first

21 articles

18 reporters

Kevin CollierNBC News
Tom GerkenBBC
The Straits TimesThe Straits Times
Barbara OrtutayToronto Star
Ariel ZilberNew York Post
Abby HughesCBC
Umar FarooqAl Jazeera
Cam WilsonABC News (AU)
Osmond ChiaBBC
AFPDawn
Izzie AddisonEvening Standard
Mathilde GrandjeanEvening Standard
Harry BlighEuronews
Sophie WingateEvening Standard
Mark DuellDaily Mail
Al Jazeera StaffAl Jazeera
Kaitlyn HuamaniToronto Star
Emma BurrowsToronto Star

By day

Articles per day

Save

Cite

APA MLA Chicago

Critical PHP Security Flaw Affects Websites. (2026, October 22). The Aporia. https://the-aporia.com/event/96277

Dated the day this page was built. The link always leads to this event, even after the stories are regrouped.

Sources (CSV) · Sources (JSON)

Photo via Toronto Star

Photo via Evening Standard

Photo via Al Jazeera

PHP, a language that dates back to the early 1990s and initially stood for Personal Home Page, underpins huge parts of the public-facing web and is baked into WordPress, Drupal, Joomla and Magento sites, meaning any critical vulnerability potentially has enormous knock-on consequences.

Summary AI · cited

European and British authorities recommended websites temporarily go offline due to severe vulnerabilities in PHP.¹

Several websites, including Pinboard and parts of Wikipedia, were temporarily down as a precaution against potential hacking.¹

Japanese websites also went offline voluntarily, affecting daycare centers and video games.¹

The vulnerabilities in PHP were discovered with the help of artificial intelligence (AI).²³

Developers released emergency patches for the critical vulnerabilities, and cybersecurity authorities urged organizations to update their systems or take them offline.⁴²⁵

Written by AI from articles by 5 outlets. Each sentence links to the articles it rests on, and was checked automatically: every name, number and quote must appear in the sentences it cites, or it is removed.

Sources cited (5)

Critical vulnerabilities in commonly used web code spark rush to update systems NBC News, 21 Oct
What is PHP and why did it spark a global cyber security scramble? BBC, 22 Oct
What’s the PHP coding flaw that could pull down 70 percent of the internet? Al Jazeera, 22 Oct
Explainer-What is PHP and why did it take government websites offline? The Straits Times, 21 Oct
Websites go dark after AI exposes major programming language security flaw Euronews, 22 Oct

What happened

The outlets' own sentences, most widely reported first. Hover one for who reported it.

The developers of PHP said on Wednesday they would release patches for two critical vulnerabilities, and EU cybersecurity officials warned organisations unable to apply the fixes to take affected websites offline.

6 of 13 outletsfirst reported 21 Octwording from The Straits Times

Government and public-service websites were also taken offline in countries including the Netherlands and Finland, as authorities worked to secure their systems.

6 of 13 outletsfirst reported 21 Octwording from Euronews

When a user loads a page, the server running PHP assembles the content and sends the finished page to the browser.

4 of 13 outletsfirst reported 21 Octwording from The Straits Times

Researchers at security firm Calif, working with OpenAI, reported the first flaw to PHP on August 11 after finding it with OpenAI's GPT-5.6 Sol model, the company said.

4 of 13 outletsfirst reported 21 Octwording from The Straits Times

Analysis

Agreed

AI · cited, from two or more outlets

PHP is a programming language that powers websites.⁴³

Quoted from the coverage (1)

"All PHP users are strongly encouraged to update immediately," the company said.

4 outlets

Disputed

Picked by our model, which is sometimes wrong

No disagreement the check could confirm. That does not prove there is none.

Framing

How the first headlines put it

NBC News focuses on the immediate impact and rush to update systems, while BBC highlights the global cybersecurity scramble.¹²
Euronews emphasizes AI's role in uncovering the flaw, whereas The Straits Times provides an explainer on PHP and its impact.⁵⁴

Stated as fact11

How it changed

21 Oct
Cybersecurity agencies in Europe, Australia, Japan and Britain have urged PHP users to update immediately or take websites offline until patches can be applied.
7 outlets · The Straits Times
22 Oct
The incident "highlights how AI can uncover security flaws" but also how it can "help attackers rapidly develop offensive tools and exploits," OpenAI said in a blog post.
3 outlets · BBC

Coverage 21 articles

22 Oct What to know about the AI-detected security bug impacting wide swaths of the internet
Toronto Star
22 Oct Thirty-two Government services offline amid PHP cybersecurity issue
Evening Standard
22 Oct What’s the PHP coding flaw that could pull down 70 percent of the internet?
Al Jazeera
22 Oct How did AI discover the internet's massive cyber-security risk?
BBC
22 Oct More than 30 government services are offline as PHP weakness sparks global cybersecurity alert
Daily Mail
22 Oct ‘Limited’ Government services temporarily offline amid PHP cybersecurity issue
Evening Standard
22 Oct Websites go dark after AI exposes major programming language security flaw
Euronews
22 Oct No breach of Budget security after critical flaw found in PHP, minister says
Evening Standard
22 Oct Websites around the world taken offline after AI finds ‘critical’ security flaw
Evening Standard
22 Oct Websites down: What is PHP and how has it raised AI hacking fears?
Dawn

Show all 21 articles

22 Oct What is PHP and why did it spark a global cyber security scramble?
BBC
22 Oct The story behind the bug threatening up to 70% of the internet
CBS News
22 Oct Australians facing spike in data breaches after 'critical' flaw uncovered
ABC News (AU)
22 Oct World leaders warn against security flaw found in PHP computer programming
Al Jazeera
21 Oct Canadian government sites among those offline after flaw identified in widely used computer language
CBC
21 Oct Major websites in US and Europe go dark as operators race to protect systems from hackers
New York Post
21 Oct Some websites go dark as operators address an AI-detected flaw in a web programming language
Toronto Star
21 Oct Explainer-What is PHP and why did it take government websites offline?
The Straits Times
21 Oct Government websites go dark as vulnerabilities in programming language send shudder across internet
The Straits Times
21 Oct Websites taken down across Europe ahead of critical cyber-security update
BBC
21 Oct Critical vulnerabilities in commonly used web code spark rush to update systems
NBC News

Built 2026-10-22 from 21 articles. Every sentence on this page is quoted from the linked article; nothing was written by a model except the Summary and the items marked AI, which cite their sources, and the questions and labels under "Disputed". Photos are from the outlets that covered the story, never from articles our check marks sensitive.