Websites Taken Offline Worldwide After AI Pinpoints Long-Standing PHP Flaws
Public and private platforms have shut down portals while applying urgent patches to vulnerabilities discovered by artificial intelligence in the widely used web language.
Key points
- Developers issued emergency fixes for two vulnerabilities in the PHP programming language that had remained hidden for years until identified by artificial intelligence.2,5,10,13
- The flaws permit remote actors to execute code and seize control of affected web servers without using login credentials.12,17
- Governments, businesses, and banks temporarily deactivated online services across multiple regions to install updates and block potential intrusions.5,8,12,16
Government departments and corporate entities across Europe, Asia, and other regions temporarily disabled public portals following the discovery of two high-severity flaws in the PHP coding language. PHP maintainers distributed urgent patches on Wednesday, prompting cybersecurity agencies worldwide to call on administrators to implement fixes immediately before malicious operators could exploit the issue.2,4,5,7,8,12,14,16,17
According to reports citing the development team and security analysts, the vulnerabilities had remained unnoticed within the software for years before being uncovered using artificial intelligence. The British Broadcasting Corporation noted that observers have termed these weaknesses the most significant flaws ever uncovered by AI systems, leading major technology firms such as Google, OpenAI, and Amazon to issue responses.5,6,10,11,13
As reported by MercoPress and Singapore's Cyber Security Agency, the two bugs allow unauthorised parties to run computer code remotely and take command of host servers without authenticating. Because security analysts at Wiz estimate that PHP underpins around 70 percent of all websites, the potential threat spans news outlets, digital stores, financial institutions, and official state services.8,9,12,15,16,17
Cybersecurity bodies in nations including Australia, New Zealand, and Singapore issued advisories urging local networks to update immediately. Tech firms and official monitors warned that some hostile actors had already begun attempting to exploit the vulnerabilities, which contributed to Australia's domestic cybersecurity portal experiencing disruption alongside other international public systems.4,5,7,17
How the coverage differs
- Most outlets focused on public sector impacts and the novelty of AI finding the flaws, while the South China Morning Post and Dawn highlighted research by firm Wiz regarding the proportion of web services reliant on PHP.5,6,8,13,15
- Broadcasters like the Australian Broadcasting Corporation focused on domestic systems being affected, while CNBC drew attention to corporate responses from Google, OpenAI, and Amazon.4,11
Sources · the original reporting
- 1Cyber agency warns websites may go dark as PHP prepares critical fix ↗CNA · SG · 21 Oct 2026, 7:28 am UTC
- 2A critical coding language vulnerability is taking websites offline over hack fears ↗Global News · World · CA · 21 Oct 2026, 1:48 pm UTC
- 3Explainer-What is PHP and why did it take government websites offline? ↗CNA · SG · 21 Oct 2026, 3:48 pm UTC
- 4Australia’s cybersecurity site among those hit by ‘critical’ software flaw ↗ABC News (AU) · AU · 21 Oct 2026, 3:58 pm UTC
- 5Government websites go dark after AI-discovered flaw sparks security scramble ↗Dawn · PK · 21 Oct 2026, 4:58 pm UTC
- 6Websites taken down worldwide as critical cyber-security update issued ↗BBC News · Business · GB · 21 Oct 2026, 7:54 pm UTC
- 7Warning for NZ as websites go dark around world in security scare ↗RNZ · World · NZ · 21 Oct 2026, 9:38 pm UTC
- 8Websites go dark worldwide as AI exposes critical security flaws ↗South China Morning Post · HK · 21 Oct 2026, 10:10 pm UTC
- 9World leaders warn against security flaw found in PHP computer programming ↗Al Jazeera · QA · 22 Oct 2026, 12:10 am UTC
- 10Government websites go dark after AI-discovered flaw sparks security scramble ↗The Japan Times · JP · 22 Oct 2026, 12:17 am UTC
- 11Critical web security flaws spark global alarm as Google, OpenAI and Amazon respond ↗CNBC · World · US · 22 Oct 2026, 1:05 am UTC
- 12Global alert over two critical PHP flaws forces government websites offline ↗MercoPress · UY · 22 Oct 2026, 2:14 am UTC
- 13What is PHP and why did it spark a global cyber security scramble? ↗BBC News · Business · GB · 22 Oct 2026, 3:48 am UTC
- 14Government websites go dark after AI-discovered flaw sparks security scramble ↗Daily Maverick · ZA · 22 Oct 2026, 4:56 am UTC
- 15Websites down: What is PHP and how has it raised AI hacking fears? ↗Dawn · PK · 22 Oct 2026, 5:36 am UTC
- 16Bank, business and ministry websites halted after PHP vulnerabilities announced ↗The Japan Times · JP · 22 Oct 2026, 6:26 am UTC
- 17Singapore organisations urged to patch critical PHP vulnerabilities immediately: CSA ↗CNA · SG · 22 Oct 2026, 9:33 am UTC
Headlines belong to their publishers and link to the original articles. Spotted an error in this Insight? Tell us — we correct or remove it.