Tech · October 22, 2026
Websites taken offline in race to patch PHP security flaw

A critical security flaw in the PHP programming language, discovered through AI tools, has prompted a global rush to apply patches. The vulnerabilities, which have reportedly existed for years, could allow hackers to gain control of affected systems. In response, several governments in the EU and Canada temporarily took their websites offline as a preventive measure while security agencies warn of widespread exploitation attempts.
Read the original coverage
- Financial TimesFinancial
Websites taken offline in race to patch PHP security flaw
Read at Financial Times ↗ - ReutersWire
Millions of hacking attempts as companies, governments rush to patch PHP flaws
Read at Reuters ↗ - EngadgetTrade
Government websites in the EU and Canada taken offline over PHP vulnerability - Engadget
Read at Engadget ↗ Global Rush to Fix PHP Security Flaw Leaves Some Websites Offline
Read at The New York Times ↗
Reported by multiple outlets
- A critical security vulnerability in PHP has been identified.
- The flaw was discovered using AI tools.
- The PHP Foundation issued a security release to patch the vulnerabilities.
- Government websites in the EU and Canada were taken offline as a preventive measure.
- PHP is a major programming language used by services like WordPress and Drupal.
Reported by only some outlets
- Cloudflare reported seeing millions of exploit attempts following the disclosure.
- The flaw had existed in PHP software for years prior to discovery.
- Governments in the Netherlands, Denmark, France, and Finland specifically took down websites.
- Canada's Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, confirmed the preventive shutdowns on social media.
Industry-friendly coverage frames it as…
emphasize the efficiency of AI in identifying long-standing vulnerabilities and the necessity of immediate software maintenance
Skeptical / consumer coverage frames it as…
highlight the potential risks posed by legacy code and the vulnerability of government infrastructure to zero-day exploits
About these outlets
CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.
