Skip to main content
Back to brief

Tech · October 22, 2026

Websites taken offline in race to patch PHP security flaw

4 sources →

A critical security flaw in the PHP programming language, discovered through AI tools, has prompted a global rush to apply patches. The vulnerabilities, which have reportedly existed for years, could allow hackers to gain control of affected systems. In response, several governments in the EU and Canada temporarily took their websites offline as a preventive measure while security agencies warn of widespread exploitation attempts.

Read the original coverage

Reported by multiple outlets

  • A critical security vulnerability in PHP has been identified.
  • The flaw was discovered using AI tools.
  • The PHP Foundation issued a security release to patch the vulnerabilities.
  • Government websites in the EU and Canada were taken offline as a preventive measure.
  • PHP is a major programming language used by services like WordPress and Drupal.

Reported by only some outlets

  • Cloudflare reported seeing millions of exploit attempts following the disclosure.
  • The flaw had existed in PHP software for years prior to discovery.
  • Governments in the Netherlands, Denmark, France, and Finland specifically took down websites.
  • Canada's Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, confirmed the preventive shutdowns on social media.

CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.