Photo via New York Post

Major websites in US and Europe go dark as operators race to protect systems from hackers

Read the original at New York Post ↗
Cite

Zilber, A. (2026, October 21). Major websites in US and Europe go dark as operators race to protect systems from hackers. New York Post. https://nypost.com/2026/10/21/business/major-websites-in-us-and-europe-go-dark-as-operators-race-to-protect-systems-from-hackers/

Dated from the outlet's own feed. Check the original for its byline.

New York Post · collected 2026-10-21 · by Ariel Zilber

Quick Summary

On Wednesday, numerous major websites in the US and Europe were temporarily shut down as operators worked to secure their systems against newly discovered vulnerabilities called “PHP2Shell,” which affect the PHP programming language used by about 70% of websites. Websites like Something Awful and supporting services for Wikipedia were among those affected, along with government sites in several European countries. The vulnerabilities allow hackers to take control of servers without logging in; they carry a critical severity rating of 9.2 out of 10. PHP developers released emergency patches but warned that full protection is not guaranteed until systems are updated.
Written by AI on 2026-10-21, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Critical vulnerabilities in PHP, a widely used programming language for web development, led to a major cyber emergency as of October 21, with European and British authorities recommending websites go offline temporarily. Websites like Pinboard and parts of Wikipedia were among those taken down out of precaution, along with Japanese daycare center systems and video games. The vulnerabilities have a critical severity rating of 9.2 out of 10, affecting nearly 70% of the world's websites according to cybersecurity firm Cloudflare.

The PHP Foundation released emergency security patches on October 21, urging immediate implementation. Government sites in Europe and Canada also went dark temporarily. The flaws could enable hackers to remotely execute code, compromising sensitive data and networks. While widespread breaches have not been confirmed, attacks were detected by Cloudflare. IT workers globally faced a massive workload as they raced against time to update systems.

Experts describe this incident as one of the worst cyber crises in recent years due to PHP's pervasive use across web technologies such as WordPress, Drupal, Joomla, and Magento. The rapid dissemination of vulnerability details ahead of fixes has complicated efforts to mitigate risks efficiently.

Written for “AI-detected PHP Security Flaw Crisis” on 2026-10-30, grounded in this article and the 25 other(s) covering the same event.

Story

📰 AI-detected PHP Security Flaw Crisis
Technology · 26 article(s) covering the same event. See how they differ ↓

Compared with similar articles

This article reads unscored and hedges 33% of its claims. Each row says how that neighbour differs.
Euronews
Hedges 3 of 19 claims Outlet record 60/100
BBC News
Hedges 4 of 25 claims Outlet record 69/100
NBC News
Hedges 2 of 13 claims Outlet record 60/100
The Straits Times
Hedges 2 of 13 claims Outlet record 66/100
The Straits Times
Hedges 4 of 26 claims Outlet record 66/100
Toronto Star
Hedges 1 of 3 claims Outlet record 64/100
BBC News
Hedges 5 of 41 claims Outlet record 69/100
“Article A reports on the immediate impact of websites going dark due to PHP2Shell vulnerabilities, while Article B provides background and context about why the vulnerabilities are significant.”
Evening Standard
Hedges 6 of 24 claims Outlet record 65/100
Daily Mail
Hedges 8 of 36 claims Outlet record 68/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
9
sentences that state something as happening or true
Uncertain
33%
3 of 9 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
New York Post's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
26
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

New York Post · 15307 article(s) · 35 correction(s) detected
Running correction rate · 35 correction(s)

Who wrote this

Ariel Zilber
77 article(s) here · 1 carrying a prediction
🔮 The Cupertino, Calif.-based tech giant introduced the redesigned laptop Wednesday, touting a new OLED display, touchscreen controls and a thinner, lighter design. But getting all the bells and whistles on the widest model will cost customers more than four times its $3,399 starting price, as tech news site MacRumors pointed out.
🔮 Partners are expected to vote on the matter in the coming days.
🔮 Life, which has weathered decades of financial turmoil, is set to publish its first quarterly edition Nov. 23 — a 250-page issue marking its return to regular print publication for the first time since 2007.
🔮 The industry’s rapid growth has also raised concerns among lawmakers and advocacy groups that traders could exploit confidential information to profit from bets on real-world events.
🔮 Robert Zullo, 55, a former BofA senior vice president, alleges that his superior, AJ Venit, warned him he “would never work in the banking industry again” during an August 2025 confrontation over Zullo relocating from Charlotte, NC, to Albany, NY, to care for his parent.
🔮 A takeover could fetch roughly $16 billion to $17 billion if a buyer pays a 30% to 40% premium, an estimate based on recent public tech deals.
🔮 Another poster at the same location estimated the crowd at “maybe 130 people” and said store staff had warned shoppers there were “very few units” available.
🔮 “After nine wonderful years at CNN, I’ve decided to leave for an opportunity that I couldn’t pass up,” she wrote on X. Golodryga did not disclose her next destination in Thursday’s announcement.
🔮 Google is facing a bipartisan Senate grilling over its aggressive push to put artificial intelligence in American classrooms amid mounting concerns that the technology could harm students’ academic performance and mental health.
🔮 Major websites in Europe and the US were temporarily knocked offline Wednesday as operators raced to protect their systems from newly disclosed software vulnerabilities that could give hackers control of servers.
Also by Ariel Zilber
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 77 articles by Ariel Zilber →

Topics

Cloudflare Netherlands PHP PHP2Shell WordPress

Subjects

Cloudflare ORG · 2× Netherlands GPE · 2× Belgium GPE · 1× Finland GPE · 1× France GPE · 1× Germany GPE · 1× Reuters ORG · 1× Something Awful ORG · 1× Wikipedia ORG · 1× the Wikimedia Foundation ORG · 1×

Narrative

The flaws carry critical severity ratings of 9.2 out of 10. PHP developers released emergency security patches Wednesday, warning that temporary safeguards cannot fully protect vulnerable systems. The PHP Foundation acknowledged that signs of one underlying problem surfaced during a 2024 security audit but remained unresolved amid technical challenges and limited engineering resources.
framing: mixed · carried by 1 article(s) · first seen 2026-10-21
🔮 Major websites in Europe and the US were temporarily knocked offline Wednesday as operators raced to protect their systems from newly disclosed software vulnerabilities that could give hackers control of servers.

Claims (9 extracted, 3 hedged)

Major websites in Europe and the US were temporarily knocked offline Wednesday as operators raced to protect their systems from newly disclosed software vulnerabilities that could give hackers control of servers. uncertain
that → knock → servers
The vulnerabilities, dubbed “PHP2Shell,” affect PHP, an open-source programming language that works behind the scenes to run websites, including those built on WordPress, Drupal and Joomla. asserted
that → dub → WordPress
Nearly 70% of websites use PHP, according to cybersecurity firm Cloudflare. uncertain
% → use → Cloudflare
US-based internet forum Something Awful temporarily shut down its message boards, while the Wikimedia Foundation, which operates Wikipedia, disabled supporting services as a precaution. asserted
which → base → precaution
Germany, France, Belgium, Finland and the Netherlands also took government websites offline, Reuters reported. asserted
Reuters → take → websites
Hospitals, political organizations and the Port of Rotterdam were among those affected in the Netherlands. asserted
Hospitals → affect → Netherlands
Cloudflare reported detecting attacks targeting the flaws, although widespread successful breaches have not been confirmed. asserted
breaches → report → flaws
Researchers at cybersecurity firm Wiz demonstrated how hackers could exploit the vulnerabilities to seize control of servers without logging in. uncertain
hackers → demonstrate → servers
The flaws carry critical severity ratings of 9.2 out of 10. PHP developers released emergency security patches Wednesday, warning that temporary safeguards cannot fully protect vulnerable systems. The PHP Foundation acknowledged that signs of one underlying problem surfaced during a 2024 security audit but remained unresolved amid technical challenges and limited engineering resources. asserted
signs → carry → challenges
💬Give feedback
🕘History 🎫Support