Global websites taken offline due to critical PHP security vulnerabilities
Current overview (not historical)
Critical security vulnerabilities in the PHP programming language have forced the temporary takedown of government and institutional websites worldwide. Authorities in Finland, the Netherlands, and the UK Parliament have taken sites offline, while major institutions like the BBC and Wikipedia have also been affected. The flaws allow potential unauthorized access to server file systems and databases. With patches not yet fully deployed, organizations have resorted to taking systems offline as a precautionary measure to prevent exploitation.
Written with AI from the reporting · updated 10/22/2026
EventGraph Explorer
One time cutoff for reports, relations and evidence.
New at this step ·UK Government Investigates Exposure After Critical PHP Security Flaws Discovered
- Reports in replay
- 3
- First-party
- 0
- Sources
- 2
Reports first seen at this step · 1
Discovery-time replay; the linked graph and evidence share this cutoff. The full overview and activity remain current.
Event developments
2 developments10/22/2026, 12:21:27 PM
AI discovers severe PHP vulnerabilities, triggering global cyber-security alertBBC World
10/22/2026, 2:01:28 PM
UK Government Investigates Exposure After Critical PHP Security Flaws DiscoveredBBC World
Filtered by first discovery; only representative reports already discovered by this cutoff are shown. Story grouping may have changed later, so this is not a complete historical snapshot.
Relations at this time
Loading time-scoped relations…
Bounded reconstruction, not an exact snapshot: entity names, relationship text and story grouping may include later revisions. Overview and full source archive below remain current.
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Oct 22, 00:00recorded Oct 22, 07:27revised
全球网站因PHP安全漏洞被迫下线
Read original source ↗ BBC WorldReplay this moment in the explorer - 2Oct 22, 14:01single sourcereport-time onlyrevised
UK government identifies PHP cybersecurity exposure
Read original source ↗ BBC WorldReplay this moment in the explorer
Uncertainty marks flag where to check the sources; they are not proven causation.
Full source archive (current)
Current public reports; outside the historical replay.
First-party sources · 0 reports
No verifiable reports in this group yet.
Independent coverage · 3 reports
- BBC World · Oct 22, 13:37UK Government Investigates Exposure After Critical PHP Security Flaws Discovered
The UK government is working to identify potential exposure in its online services following the discovery of critical security flaws in the PHP programming language, which underpins a significant number of global websites, including Wikipedia and WordPress. Amazon reported multiple 'PHP2Shell exploitation attempts' on October 17, occurring before the warning embargo was lifted, and noted that the flaws went undetected for at least a decade. The National Cyber Security Centre (NCSC) urged all organizations to apply fixes or take systems offline if immediate remediation is not feasible. Wiz estimated that roughly 70% of the internet is affected.
Read original source ↗ - BBC World · Oct 22, 11:48AI discovers severe PHP vulnerabilities, triggering global cyber-security alert
Researchers used AI to uncover critical security flaws in PHP, a programming language powering millions of websites including Wikipedia and WordPress. The vulnerabilities could allow attackers to take control of web servers and steal data without authentication. Major platforms and government portals have been taken offline as a precaution while security agencies urge immediate patching.
Read original source ↗ - BBC Business · Oct 22, 03:54Global websites taken offline after critical PHP security flaws are discovered
International governments and agencies urged websites to address two critical vulnerabilities in the PHP programming language, which powers much of the internet. Due to the severity, bodies including the Finnish government, Edinburgh council, and the BBC have taken pages offline, while the Wikimedia Foundation temporarily shut down parts of Wikipedia. The flaws, which could provide a direct path to a server's file system or database, were discovered by AI tools through OpenAI's Patch the Planet program, involving researchers from Calif and Wiz, and had gone undetected for over a decade.
Read original source ↗
Different reports do not necessarily disagree. Check original sources and publication dates.
Report timeline
Explore every side through dated source reports.
- BBC WorldUK Government Investigates Exposure After Critical PHP Security Flaws Discovered
The UK government is working to identify potential exposure in its online services following the discovery of critical security flaws in the PHP programming language, which underpins a significant number of global websites, including Wikipedia and WordPress. Amazon reported multiple 'PHP2Shell exploitation attempts' on October 17, occurring before the warning embargo was lifted, and noted that the flaws went undetected for at least a decade. The National Cyber Security Centre (NCSC) urged all organizations to apply fixes or take systems offline if immediate remediation is not feasible. Wiz estimated that roughly 70% of the internet is affected.
- BBC WorldSelectedAI discovers severe PHP vulnerabilities, triggering global cyber-security alert
Researchers used AI to uncover critical security flaws in PHP, a programming language powering millions of websites including Wikipedia and WordPress. The vulnerabilities could allow attackers to take control of web servers and steal data without authentication. Major platforms and government portals have been taken offline as a precaution while security agencies urge immediate patching.
- BBC BusinessGlobal websites taken offline after critical PHP security flaws are discovered
International governments and agencies urged websites to address two critical vulnerabilities in the PHP programming language, which powers much of the internet. Due to the severity, bodies including the Finnish government, Edinburgh council, and the BBC have taken pages offline, while the Wikimedia Foundation temporarily shut down parts of Wikipedia. The flaws, which could provide a direct path to a server's file system or database, were discovered by AI tools through OpenAI's Patch the Planet program, involving researchers from Calif and Wiz, and had gone undetected for over a decade.