Global Websites Go Offline After Critical PHP Security Flaws Discovered
Government and company websites worldwide went offline this week after artificial intelligence discovered two critical security vulnerabilities in PHP, a programming language used by approximately 70 percent of all websites. The flaws, hidden in the software for years, could allow attackers to remotely execute code, steal sensitive data, or take control of systems. International cybersecurity agencies, including the US National Security Agency and European authorities, urged organizations to immediately update their systems or take them offline as a precaution. Multiple government websites in Finland, the Netherlands, France, Denmark, and elsewhere went dark temporarily while implementing emergency patches. The PHP Foundation released software updates, and major tech companies including Google, OpenAI, and Amazon coordinated to prepare protective measures. While millions of hacking attempts occurred on networks like Cloudflare, no major organizations have reported actual system compromises. Organizations worldwide are racing to patch their systems as experts warn this represents a critical internet security event.
Key facts
- PHP powers approximately 70 percent of all websites globally
- Two critical vulnerabilities in PHP, called CVE-2026-109618 and CVE-2026-109619, were discovered by artificial intelligence
- Governments in Finland, Netherlands, France, Denmark, and UK took websites offline as precaution
- Cloudflare detected millions of hacking attempts but reported no successful compromises
- PHP Foundation released emergency patches on October 21, 2026
- Vulnerabilities had existed in PHP for years before AI detection
- The flaws could allow attackers to access server file systems, databases, and execute remote code
Limits of this briefing
Limited coverage explicitly from right-leaning outlets was found in search results. Political perspectives on this technical cybersecurity event may not be sharply divided, as internet security typically enjoys bipartisan support from governments and businesses worldwide.
Sources
- 3news.com: Websites taken down worldwide as critical cyber-security update issued Centre
- CTV News Canada: Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet Centre
- CNBC: Critical PHP web security flaws spark global alarm as Google, OpenAI and Amazon respond Centre
- The Journal (Ireland): Websites around the world go dark after critical security flaws exposed Left
- The Independent: Websites worldwide taken offline over huge cyber security threat – live updates Left