Photo via The Straits Times

Government websites go dark as vulnerabilities in programming language send shudder across internet

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, October 21). Government websites go dark as vulnerabilities in programming language send shudder across internet. The Straits Times. https://www.straitstimes.com/world/government-websites-go-dark-as-vulnerabilities-in-programming-language-send-shudder-across-internet

Dated from the outlet's own feed. Check the original for its byline.

The Straits Times · collected 2026-10-21 · by The Straits Times

Quick Summary

On October 21, government websites in Europe and other regions went dark after critical vulnerabilities were discovered in the widely used programming language PHP. Developers urged immediate updates to prevent exploitation by hackers, leading agencies like those in the Netherlands and Finland to take their sites offline as a precaution. The widespread use of PHP across various platforms raised concerns about potential large-scale website breaches.
Written by AI on 2026-10-21, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

As of October 21, 2026, critical vulnerabilities were discovered in PHP, a widely used web programming language, prompting European and British authorities to recommend that many websites temporarily go dark. This led to several major sites, including government pages in Europe, the BBC, and other organizations like Wikipedia and Pinboard, being taken offline on Wednesday morning as website operators scrambled to apply security updates or risk potential cyberattacks. The vulnerabilities, rated at a critical severity of 9.2 out of 10, could allow hackers to remotely execute code, potentially compromising sensitive data and networks. Reports suggest that up to 70% of the world's websites may be affected by these issues, as PHP underpins large parts of the internet infrastructure. The discovery underscores concerns about the rapid spread of AI in cybersecurity, with some experts calling it "one of the first areas where we are going to see the harmful impact of AI."

Written for “AI-detected PHP Security Flaw” on 2026-11-03, grounded in this article and the 26 other(s) covering the same event.

Story

📰 AI-detected PHP Security Flaw
Technology · 27 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 15% of its claims. Each row says how that neighbour differs.
Websites taken down across Europe ahead of critical cyber-security update Same event
BBC News
Hedges 4 of 25 claims Outlet record 68/100
Canadian government sites among those offline after flaw identified in widely used computer language Same event
CBC News
Hedges 2 of 18 claims Outlet record 74/100
Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for you Same event
Daily Mail
Hedges 14 of 80 claims Outlet record 69/100
Explainer-What is PHP and why did it take government websites offline? Same event
The Straits Times
Hedges 4 of 26 claims Outlet record 66/100
Websites go dark after AI exposes major programming language security flaw Same event
Euronews
Hedges 3 of 19 claims Outlet record 60/100
Critical vulnerabilities in commonly used web code spark rush to update systems Same event
NBC News
Hedges 2 of 13 claims Outlet record 60/100
Some websites go dark as operators address an AI-detected flaw in a web programming language Same event
Toronto Star
Hedges 1 of 3 claims Outlet record 64/100
Major websites in US and Europe go dark as operators race to protect systems from hackers Same event
New York Post
Hedges 3 of 9 claims Outlet record 66/100
Websites around the world taken offline after AI finds ‘critical’ security flaw Same event
Evening Standard
Hedges 6 of 24 claims Outlet record 64/100
No breach of Budget security after critical flaw found in PHP, minister says Different event
Evening Standard
Hedges 3 of 20 claims Outlet record 64/100
“While both articles discuss vulnerabilities in PHP affecting government websites, Article A describes the initial impact and disclosure of the vulnerabilities, while Article B reports on a follow-up statement by Scotland Secretary Douglas Alexander regarding Budget security.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
13
sentences that state something as happening or true
Uncertain
15%
2 of 13 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
27
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 4290 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)
2026-10-30
Number of residents leaving Oleshky still unclear, Kyiv says
2026-10-21
X Community Notes ‘failed’ to flag US election falsehoods, study says
2026-10-04
Tennessee prison chief resigns after failed execution
2026-10-03
US prison chief resigns after failed execution of death row inmate Christa Pike
2026-09-13
Russia hits Ukrainian-Polish border area, Kyiv says

Who wrote this

The Straits Times
2807 article(s) here · 1 carrying a prediction
🔮 Pope Leo is healthy and ready to depart this week for an intense three-country tour of South America less than a month after his lung cancer surgery, Vatican officials said on Nov 3, adding that no extra medical precautions were being taken for the trip. Leo, 71, leaves on Nov 6 for a 12-day tour of Uruguay, Argentina and Peru, set to be one of the most intense a pope has taken in decades. He had surgery on Oct 13 to remove the lower lobe of his right lung. “The pope is in good health,” Vatican spokesperson Matteo Bruni said at a briefing.
2026-11-03 · assertive framing · Pope Leo healthy and needs no extra measures for South America trip, Vatican says
🔮 “There are so many vulnerabilities out there that in some ways you could say are waiting to be exploited,” he said following a speech to coincide with the release of his agency’s annual report.
2026-11-03 · assertive framing · Supermarket fridge attack is just the start, says UK cybersecurity chief
🔮 "But I would also say it is important for Russia to finally engage in serious negotiations on a ceasefire and a subsequent peace agreement.
2026-11-03 · assertive framing · Russia must show it is serious about ceasefire at Abu Dhabi talks, Germany's Merz says
🔮 Those rulings all came after the US Supreme Court swiftly rejected the administration's request that it intervene in a Justice Department lawsuit seeking to order California election officials not to count any mail ballots received from more than 20,000 people it says may be noncitizens.
2026-11-03 · assertive framing · With US midterms underway, courts rebuff Trump's pressure on state election officials
🔮 Ceding control of either chamber to the Democrats would imperil Trump's legislative agenda and open the door to Democratic-led congressional investigations targeting him and his administration.
2026-11-03 · assertive framing · Trump's Supreme Court winning streak in election cases screeches to a halt
🔮 Trump says US will stop $4 billion military aid to Israel at end of 2026 WASHINGTON, Nov 3 - US President Donald Trump on Tuesday said he made a deal with Israeli Prime Minister Benjamin Netanyahu and that Washington would no longer be providing military aid to Israel after the end of this year.
2026-11-03 · assertive framing · Trump says US will stop $4 billion military aid to Israel at end of 2026
🔮 Trump's Justice Dept identifies where US election monitors will be in the 50 states
2026-11-03 · assertive framing · Trump's Justice Dept identifies where US election monitors will be in the 50 states
🔮 The European Commission will host a meeting on Ukraine on Wednesday with representatives of the United States, Ukraine, NATO and European allies, the European Union's executive body said on Tuesday.
2026-11-03 · assertive framing · EU to host talks on Ukraine with United States and others on Wednesday
🔮 Republicans losing the House of Representatives would give Democrats the power to stall Trump’s legislative agenda and launch sweeping investigations of his administration.
2026-11-03 · assertive framing · Trump’s grip on power on the line as America votes
🔮 UK spy agency MI5 will not face contempt case for misleading evidence, court rules
2026-11-03 · assertive framing · UK spy agency MI5 will not face contempt case for misleading evidence, court rules
Also by The Straits Times
European supermarkets rush to patch vulnerabilities after region-wide fridge hack
2026-11-03 · The Straits Times
Supermarket fridge attack is just the start, says UK cybersecurity chief
2026-11-03 · The Straits Times
Europe-wide bomb threats disrupt air travel
2026-11-03 · The Straits Times
Pope Leo healthy and needs no extra measures for South America trip, Vatican says
2026-11-03 · The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2807 articles by The Straits Times →

Topics

Cloudflare Finland Netherlands PHP WordPress

Subjects

Cloudflare ORG · 2× PHP ORG · 2× WordPress ORG · 2× Australia GPE · 1× Britain GPE · 1× Dane Knecht PERSON · 1× Finland GPE · 1× Huntress ORG · 1× Japan GPE · 1× Netherlands GPE · 1×

Narrative

It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn't even advertise that it runs PHP under the hood," cybersecurity company Huntress said in a blog post.
framing: assertive · carried by 1 article(s) · first seen 2026-10-21
🔮 PHP underpins large parts of the internet, raising concerns that a significant number of websites could be vulnerable to attack. "
2026-10-21 · The Straits Times
Government websites go dark as vulnerabilities in programming language send shudder across internet · assertive framing

Claims (13 extracted, 2 hedged)

Government websites go dark as vulnerabilities in programming language send shudder across internet Oct 21 - asserted
vulnerabilities → go → internet
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators scrambling to protect their systems. asserted
disclosure → go → systems
Developers of the PHP programming language said Tuesday they had identified two critical vulnerabilities and urged users to update their sites as soon as a fix was released. asserted
fix → say → sites
With reports that hackers were already exploiting the flaws to break into websites, government agencies in the Netherlands and Finland were among those that took sites offline as a precaution. asserted
that → exploit → precaution
PHP underpins large parts of the internet, raising concerns that a significant number of websites could be vulnerable to attack. " uncertain
number → underpin → attack
It quietly powers WordPress, Drupal, Joomla, and Magento sites, shared hosting platforms, control panels, and an awful lot of software that doesn't even advertise that it runs PHP under the hood," cybersecurity company Huntress said in a blog post. asserted
Huntress → power → post
Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure. asserted
Cloudflare → say → measure
"We are seeing early attacks emerging and are updating mitigations as new vectors show up. asserted
vectors → see → mitigations
Patch as soon as PHP releases the update," he said on X. Wordfence, a security plugin that protects WordPress websites, said all WordPress sites run on a PHP-installed server. asserted
sites → patch → server
It warned that automatic updates would not apply the fix and advised site owners to find out who is responsible for updating PHP on their sites. asserted
who → warn → sites
Cybersecurity agencies in Europe, Australia, Japan and Britain have urged PHP users to update immediately or take websites offline until patches can be applied. asserted
patches → urge → websites
The Dutch cybersecurity agency itself went offline, saying it had done so as a precaution because of the vulnerabilities. asserted
it → go → vulnerabilities
Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable. uncertain
versions → say → PHP
💬Give feedback
🕘History 🎫Support
Terms · Privacy · beta v2.0.0
Articles to 3 Nov 2026