THU, 22 OCT 2026|
[BRAND]
LATEST
AI InsightGeneral

Websites Taken Offline Worldwide After AI Pinpoints Long-Standing PHP Flaws

Public and private platforms have shut down portals while applying urgent patches to vulnerabilities discovered by artificial intelligence in the widely used web language.

[BRAND] AI Insight
Updated 22 Oct 2026, 9:40 am UTC · 6 h ago
Listen to this Insight
Read aloud by your device

Key points

  • Developers issued emergency fixes for two vulnerabilities in the PHP programming language that had remained hidden for years until identified by artificial intelligence.2,5,10,13
  • The flaws permit remote actors to execute code and seize control of affected web servers without using login credentials.12,17
  • Governments, businesses, and banks temporarily deactivated online services across multiple regions to install updates and block potential intrusions.5,8,12,16

Government departments and corporate entities across Europe, Asia, and other regions temporarily disabled public portals following the discovery of two high-severity flaws in the PHP coding language. PHP maintainers distributed urgent patches on Wednesday, prompting cybersecurity agencies worldwide to call on administrators to implement fixes immediately before malicious operators could exploit the issue.2,4,5,7,8,12,14,16,17

According to reports citing the development team and security analysts, the vulnerabilities had remained unnoticed within the software for years before being uncovered using artificial intelligence. The British Broadcasting Corporation noted that observers have termed these weaknesses the most significant flaws ever uncovered by AI systems, leading major technology firms such as Google, OpenAI, and Amazon to issue responses.5,6,10,11,13

As reported by MercoPress and Singapore's Cyber Security Agency, the two bugs allow unauthorised parties to run computer code remotely and take command of host servers without authenticating. Because security analysts at Wiz estimate that PHP underpins around 70 percent of all websites, the potential threat spans news outlets, digital stores, financial institutions, and official state services.8,9,12,15,16,17

Cybersecurity bodies in nations including Australia, New Zealand, and Singapore issued advisories urging local networks to update immediately. Tech firms and official monitors warned that some hostile actors had already begun attempting to exploit the vulnerabilities, which contributed to Australia's domestic cybersecurity portal experiencing disruption alongside other international public systems.4,5,7,17

How the coverage differs

  • Most outlets focused on public sector impacts and the novelty of AI finding the flaws, while the South China Morning Post and Dawn highlighted research by firm Wiz regarding the proportion of web services reliant on PHP.5,6,8,13,15
  • Broadcasters like the Australian Broadcasting Corporation focused on domestic systems being affected, while CNBC drew attention to corporate responses from Google, OpenAI, and Amazon.4,11

Sources · the original reporting

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
    Websites taken down worldwide as critical cyber-security update issued ↗
    BBC News · Business · GB · 21 Oct 2026, 7:54 pm UTC
  7. 7
    Warning for NZ as websites go dark around world in security scare ↗
    RNZ · World · NZ · 21 Oct 2026, 9:38 pm UTC
  8. 8
    Websites go dark worldwide as AI exposes critical security flaws ↗
    South China Morning Post · HK · 21 Oct 2026, 10:10 pm UTC
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
    What is PHP and why did it spark a global cyber security scramble? ↗
    BBC News · Business · GB · 22 Oct 2026, 3:48 am UTC
  14. 14
  15. 15
  16. 16
  17. 17

Headlines belong to their publishers and link to the original articles. Spotted an error in this Insight? Tell us — we correct or remove it.