Photo via Toronto Star

Some websites go dark as operators address an AI-detected flaw in a web programming language

Read the original at Toronto Star ↗
Cite

Ortutay, B. (2026, October 21). Some websites go dark as operators address an AI-detected flaw in a web programming language. Toronto Star. https://www.thestar.com/news/world/united-states/some-websites-go-dark-as-operators-address-an-ai-detected-flaw-in-a-web-programming-language/article_296e1c63-1449-507c-9dfa-eff3777f70e8.html

Dated from the outlet's own feed. Check the original for its byline.

Toronto Star · collected 2026-10-21 · by Barbara Ortutay

Quick Summary

On Wednesday, the FBI and National Security Agency issued a warning about two critical vulnerabilities in PHP, a commonly used web programming language. These flaws could enable attackers to remotely execute code, putting sensitive data and networks at risk. As a precautionary measure, operators were advised by the FBI to take affected websites offline until updates can be implemented.
Written by AI on 2026-10-21, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

As of October 21, 2026, critical vulnerabilities were discovered in PHP, a widely used web programming language, prompting European and British authorities to recommend that many websites temporarily go dark. This led to several major sites, including government pages in Europe, the BBC, and other organizations like Wikipedia and Pinboard, being taken offline on Wednesday morning as website operators scrambled to apply security updates or risk potential cyberattacks. The vulnerabilities, rated at a critical severity of 9.2 out of 10, could allow hackers to remotely execute code, potentially compromising sensitive data and networks. Reports suggest that up to 70% of the world's websites may be affected by these issues, as PHP underpins large parts of the internet infrastructure. The discovery underscores concerns about the rapid spread of AI in cybersecurity, with some experts calling it "one of the first areas where we are going to see the harmful impact of AI."

Written for “AI-detected PHP Security Flaw” on 2026-11-04, grounded in this article and the 26 other(s) covering the same event.

Story

📰 AI-detected PHP Security Flaw
Technology · 27 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 33% of its claims. Each row says how that neighbour differs.
Websites go dark after AI exposes major programming language security flaw Same event
Euronews
Hedges 3 of 19 claims Outlet record 60/100
Critical vulnerabilities in commonly used web code spark rush to update systems Same event
NBC News
Hedges 2 of 13 claims Outlet record 78/100
Websites taken down across Europe ahead of critical cyber-security update Same event
BBC News
Hedges 4 of 25 claims Outlet record 66/100
Government websites go dark as vulnerabilities in programming language send shudder across internet Same event
The Straits Times
Hedges 2 of 13 claims Outlet record 66/100
Explainer-What is PHP and why did it take government websites offline? Same event
The Straits Times
Hedges 4 of 26 claims Outlet record 66/100
Major websites in US and Europe go dark as operators race to protect systems from hackers Same event
New York Post
Hedges 3 of 9 claims Outlet record 66/100
Canadian government sites among those offline after flaw identified in widely used computer language Same event
CBC News
Hedges 2 of 18 claims Outlet record 71/100
World leaders warn against security flaw found in PHP computer programming Same event
Al Jazeera
Hedges 2 of 21 claims Outlet record 60/100
Australians facing spike in data breaches after 'critical' flaw uncovered Same event
ABC News (AU)
Hedges 5 of 27 claims Outlet record 67/100
What is PHP and why did it spark a global cyber security scramble? Same event
BBC News
Hedges 5 of 41 claims Outlet record 66/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
3
sentences that state something as happening or true
Uncertain
33%
1 of 3 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
64/100
Toronto Star's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
27
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Toronto Star · 11561 article(s) · 28 correction(s) detected
Running correction rate · 28 correction(s)
2026-10-31
Inmate's escape is just the latest problem for Tennessee's troubled prison system
2026-10-26
Correction
2026-10-24
Correction
2026-10-22
News Clarification for Oct. 22
2026-10-21
No. 6 Hoosiers try to for rare rebound at Michigan after turning the page on 22-game winning streak
2026-10-19
Driver’s License Suspensions for Court Debt Draw Scrutiny
2026-10-16
Amputations and cancer treatment delays: Lawmakers hear testimony on Mississippi prison healthcare
2026-10-16
UPDATE: Golconda Gold Releases Q3 2026 Production Update at Galaxy
2026-10-08
News Clarification for Oct. 8
2026-10-07
Correction
2026-10-05
Entertainment Correction for Oct. 5
2026-10-03
Tennessee's prisons chief is resigning after failed execution of Christa Pike
2026-09-28
Organizations call for Action to End the Deaths of Indigenous People in Custody
2026-09-27
Police memorial recognizes six officers killed in the line of duty in 2026
2026-09-27
UPDATE: WSP to host Power & Energy-focused investor event virtually only
2026-09-26
News Clarification for Sept. 27
2026-09-26
Former federal public servant seeks better pensions for injured workers
2026-09-25
News Corrections for Sept. 25
2026-09-25
She has not been charged. But the Project South allegations have branded her with a 'scarlet letter'
2026-09-24
Correction
2026-09-23
MULTIMEDIA UPDATE: Smith+Nephew launches the new EVOS™ PELVIC Plating System at the 2026 Orthopedic Trauma Association (OTA) Annual Meeting, expanding the EVOS Plating Platform for pelvic and acetabular fracture management
2026-09-22
Costa Rican man complained of lack of care for diabetes before his death in ICE custody, family says
2026-09-22
Judges' grilling of accused men leads to sex assault and dangerous driving cases being overturned
2026-09-20
Jura Energy Corporation Provides Clarification Regarding Media Reports Concerning Its Petroleum Rights in Pakistan
2026-09-19
New details emerge about Toronto's guns-for-hire and the 'crash-out mission" that sparked the Project South investigation
2026-09-17
UPDATE: Osisko Critical Minerals Corporation Announces C$100 Million Private Placement of Special Warrants
2026-09-17
Alabama set to execute man for pawn shop killings months after his nitrogen gas execution blocked
2026-09-04
Orca Corrects Q3 Quarterly Dividend Announcement

Who wrote this

Barbara Ortutay
5 article(s) here · 1 carrying a prediction
🔮 Students using Google software in the classroom will not be allowed to access the company’s search engine unless their school system also opts in to artificial intelligence tools, the tech giant said Tuesday.
2026-11-03 · assertive framing · Google will cut off search access for students at schools that reject AI tools
🔮 Meta said it was postponing the rollout of new terms for its business accounts after an outcry from media companies and open-web advocates who said the updated rules would allow the tech giant to scrape vast amounts of data and potentially build competing services.
2026-11-02 · assertive framing · Meta delays new business terms after outcry over potential web scraping of news sites
🔮 The FBI’s cyber division said the vulnerabilities could allow malicious actors to remotely execute code in the programming language, PHP, potentially compromising sensitive data and networks.
2026-10-21 · mixed framing · Some websites go dark as operators address an AI-detected flaw in a web programming language
🔮 It could bring the promise of advances in science and medicine, tech company executives say, but also risks.
2026-09-19 · assertive framing · Will AI models achieve the ability to improve autonomously? Leading labs say the scenario is near
🔮 It could bring the promise of advances in science and medicine, tech company executives say, but also risks.
2026-09-19 · assertive framing · Will AI models achieve the ability to improve autonomously? Leading labs say the scenario is near
Also by Barbara Ortutay
Google will cut off search access for students at schools that reject AI tools
2026-11-03 · Toronto Star
Meta delays new business terms after outcry over potential web scraping of news sites
2026-11-02 · The Independent
Will AI models achieve the ability to improve autonomously? Leading labs say the scenario is near
2026-09-19 · Toronto Star
Will AI models achieve the ability to improve autonomously? Leading labs say the scenario is near
2026-09-19 · The Independent
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

FBI the National Security Agency

Subjects

FBI ORG · 2× the National Security Agency ORG · 1×

Narrative

The FBI and the National Security Agency warned Wednesday about the discovery of two “critical vulnerabilities” in a widely used programming language that powers websites and web applications.
framing: mixed · carried by 1 article(s) · first seen 2026-10-21
🔮 The FBI’s cyber division said the vulnerabilities could allow malicious actors to remotely execute code in the programming language, PHP, potentially compromising sensitive data and networks.
2026-10-21 · Toronto Star
Some websites go dark as operators address an AI-detected flaw in a web programming language · mixed framing

Claims (3 extracted, 1 hedged)

The FBI and the National Security Agency warned Wednesday about the discovery of two “critical vulnerabilities” in a widely used programming language that powers websites and web applications. asserted
that → warn → websites
The FBI’s cyber division said the vulnerabilities could allow malicious actors to remotely execute code in the programming language, PHP, potentially compromising sensitive data and networks. uncertain
actors → say → data
It recommended that operators take websites offline if they can’t update them immediately. asserted
they → recommend → them
💬Give feedback · no sign-in needed

No sign-in needed for now. Your note is sent without a name, so it cannot be answered.

🕘History 🎫Support
Terms · Privacy · beta v2.0.0
Articles to 4 Nov 2026