The Aporia · PHP bug "about as bad as it can get," cybersecurity reporter says

PHP bug "about as bad as it can get," cybersecurity reporter says

Read the original at CBS News ↗

Cite

APA MLA Chicago

PHP bug "about as bad as it can get," cybersecurity reporter says. (2026, October 23). CBS News. https://www.cbsnews.com/video/php-bug-about-as-bad-as-it-can-get-cybersecurity-reporter-says/

Dated from the outlet's own feed. Check the original for its byline.

Quick Summary

Raphael Satter, a Reuters cybersecurity reporter, discusses a significant bug in the PHP programming language that may affect up to 70% of the world’s websites, potentially exposing them to serious security risks. The article highlights the severity of the issue by quoting experts who consider it one of the worst possible vulnerabilities for this technology.

Written by AI on 2026-10-23, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

As of October 21, 2026, critical vulnerabilities were discovered in PHP, a widely used web programming language, prompting European and British authorities to recommend that many websites temporarily go dark. This led to several major sites, including government pages in Europe, the BBC, and other organizations like Wikipedia and Pinboard, being taken offline on Wednesday morning as website operators scrambled to apply security updates or risk potential cyberattacks. The vulnerabilities, rated at a critical severity of 9.2 out of 10, could allow hackers to remotely execute code, potentially compromising sensitive data and networks. Reports suggest that up to 70% of the world's websites may be affected by these issues, as PHP underpins large parts of the internet infrastructure. The discovery underscores concerns about the rapid spread of AI in cybersecurity, with some experts calling it "one of the first areas where we are going to see the harmful impact of AI."

Written for “AI-detected PHP Security Flaw” on 2026-11-01, grounded in this article and the 26 other(s) covering the same event.

Compared with similar articles

This article reads unscored and hedges 50% of its claims. Each row says how that neighbour differs.

Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for you Same event

Daily Mail

Hedges 14 of 80 claims Outlet record 68/100

Websites taken down across Europe ahead of critical cyber-security update Different event

BBC News

Hedges 4 of 25 claims Outlet record 68/100

“The articles discuss related issues but different aspects of the PHP security update; Article A reports on specific websites being taken down, while Article B focuses on an expert's analysis of the vulnerability.”

Australians facing spike in data breaches after 'critical' flaw uncovered Different event

ABC News (AU)

Hedges 5 of 27 claims Outlet record 68/100

“Both articles discuss a critical flaw in PHP affecting many websites, but they are written on different dates and provide distinct information without clearly describing the exact same incident.”

The story behind the bug threatening up to 70% of the internet Same event

CBS News

Hedges 0 of 2 claims Outlet record 66/100

More than 30 government services are offline as PHP weakness sparks global cybersecurity alert Different event

Daily Mail

Hedges 8 of 36 claims Outlet record 68/100

“While both articles discuss a PHP security flaw, they describe different aspects of the issue and are published on different dates.”

What to know about the AI-detected security bug impacting wide swaths of the internet Same event

Toronto Star

Hedges 7 of 23 claims Outlet record 64/100

PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says Different event

The Straits Times

Hedges 1 of 15 claims Outlet record 66/100

“The articles discuss different aspects related to PHP but describe distinct events: one focuses on a critical vulnerability in PHP, while the other discusses the funding and staffing of the PHP Foundation.”

Government websites go dark as vulnerabilities in programming language send shudder across internet Different event

The Straits Times

Hedges 2 of 13 claims Outlet record 66/100

“The articles discuss related vulnerabilities in PHP but describe different aspects of the event; Article A covers the immediate impact on government websites, while Article B provides a broader analysis and expert opinion.”

Explainer-What is PHP and why did it take government websites offline? Different event

The Straits Times

Hedges 4 of 26 claims Outlet record 66/100

“Article A describes the immediate reaction to vulnerabilities in PHP that caused government websites to go offline, while Article B provides a broader analysis of the severity and impact of the PHP bug across all websites.”

Some websites go dark as operators address an AI-detected flaw in a web programming language Different event

Toronto Star

Hedges 1 of 3 claims Outlet record 64/100

“While both articles discuss a critical vulnerability in PHP, they describe different aspects of the event and are not reporting on the exact same incident at the same time.”

How this article was measured signals, leaning charts, publisher record, byline, topics and claims