PHP vulnerabilities prompt government websites in the Netherlands and Finland to go offline

2026-10-21

PHP developers disclosed two critical vulnerabilities and released a fix the following day.
After reports that hackers were exploiting the flaws, government agencies in the Netherlands and Finland took websites offline as a precaution.
PHP users were urged to update their systems or take websites offline until patches could be applied.
The vulnerabilities could let attackers run code remotely on affected servers without authorization.
AI-assisted research helped uncover the flaws; Calif used an OpenAI model, and Google-owned Wiz independently found both vulnerabilities.

Failles PHP : des millions de sites menacés, les États-Unis recommandent une mise à jour immédiate (La Croix)
Websites go dark after AI exposes major programming language security flaw (Euronews)
Сотни миллионов сайтов оказались под угрозой взлома из-за уязвимостей в языке программирования PHP. Насколько это опасно? И угрожает ли что-то лично вам? (Meduza)
Government websites in Europe go dark as software flaw sparks security scramble (The Business Times)
FSB Orders Critical Infrastructure Operators to Shutter Websites Over PHP Bug – RBC (The Moscow Times)
ИИ-агенты ищут слабые места интернета (Kommersant)
Inside the cyber flaw scramble that brought the AI threat to life (Politico Europe)
What to know about the AI-detected security bug impacting wide swaths of the internet (Mint)
Siber alarm büyüyor! Türkiye'den ulusal çapta uyarı (Sözcü)
PHP security flaws trigger global scramble; CERT-In flags vulnerabilities (The Times of India)
Gov’t sites go dark as vulnerabilities in programming language send shudder across internet (News5)
PHP programming language: అంతర్జాతీయంగా నిలిచిన వెబ్‌సైట్లు.. ఎందుకంటే..? (Eenadu)
Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis (NBC News)
PHP flaws could let hackers access web servers without logging in (The New Indian Express)
Milyonlarca siteyi etkileyebilecek güvenlik açığı tespit edildi (Bianet)
Banks and government agencies take websites offline over PHP security flaws (The Kathmandu Post)