The Aporia · Websites go dark after AI exposes major programming language security flaw

Websites go dark after AI exposes major programming language security flaw

Read the original at Euronews ↗

Cite

APA MLA Chicago

Bligh, H. (2026, October 22). Websites go dark after AI exposes major programming language security flaw. Euronews. https://www.euronews.com/2026/10/22/websites-go-dark-after-ai-exposes-major-programming-language-security-flaw

Dated from the outlet's own feed. Check the original for its byline.

Quick Summary

On Wednesday, numerous government agencies and companies worldwide shut down websites due to critical security flaws in PHP, a programming language used by approximately 70% of web sites globally. The flaws were discovered independently by Calif, funded by OpenAI's GPT-5.6 Sol model, and Wiz, a Google-owned cybersecurity company. Both vulnerabilities scored a severity rating of 9.2 out of 10, prompting immediate action to update or shut down systems, including actions taken by the Wikimedia Foundation, Amazon Threat Intelligence, and several European governments like France and Germany.

Written by AI on 2026-10-22, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Critical vulnerabilities in PHP, a widely used programming language for web development, led to a major cyber emergency as of October 21, with European and British authorities recommending websites go offline temporarily. Websites like Pinboard and parts of Wikipedia were among those taken down out of precaution, along with Japanese daycare center systems and video games. The vulnerabilities have a critical severity rating of 9.2 out of 10, affecting nearly 70% of the world's websites according to cybersecurity firm Cloudflare.

The PHP Foundation released emergency security patches on October 21, urging immediate implementation. Government sites in Europe and Canada also went dark temporarily. The flaws could enable hackers to remotely execute code, compromising sensitive data and networks. While widespread breaches have not been confirmed, attacks were detected by Cloudflare. IT workers globally faced a massive workload as they raced against time to update systems.

Experts describe this incident as one of the worst cyber crises in recent years due to PHP's pervasive use across web technologies such as WordPress, Drupal, Joomla, and Magento. The rapid dissemination of vulnerability details ahead of fixes has complicated efforts to mitigate risks efficiently.

Written for “AI-detected PHP Security Flaw Crisis” on 2026-10-30, grounded in this article and the 25 other(s) covering the same event.

Compared with similar articles

How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted

sentences that state something as happening or true

Uncertain

16%

3 of 19 hedged ("reportedly", "may", "according to")

Leaning

not political

takes no side on a contested political question

Publisher signals

60/100

Euronews's corrections and hedging, across everything collected from it. Not a measure of accuracy.

Outlets on this story

Technology

Same framing elsewhere

articles that frame the event the way this one does

Analyzed 2026-10-22 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability

Source leaning vs. consistency

Publisher

Euronews · 1112 article(s) · 1 correction(s) detected

Running correction rate · 1 correction(s)

2026-10-01

Death-row inmate Christa Pike seen during murder trial

Who wrote this

Harry Bligh

10 article(s) here · 1 carrying a prediction

🔮 The final count, expected on Thursday evening, is set to confirm that Netanyahu's bloc has fallen short of the 61 seats needed for a majority.

2026-10-29 · assertive framing · Netenyahu's Likud party alleges interference and fraud in Israel's election

🔮 Developers released emergency fixes on Wednesday, while cybersecurity authorities urged organisations to update affected systems immediately or take them offline until they could be secured.

2026-10-22 · assertive framing · Websites go dark after AI exposes major programming language security flaw

🔮 Previously, as the mayor of Greater Manchester, Andy Burnham had said Trump was not welcome in the city and that he would refuse to meet him.

2026-09-22 · assertive framing · British PM Andy Burnham to meet Trump for the first time at the UN in New York

🔮 The Mayor of Austin, Kirk Watson, has called for an independent probe involving local police, saying ICE should not investigate the incident by itself.

2026-09-21 · assertive framing · Venezuelan man shot and injured by ICE agent in Texas, officials say

🔮 It is not yet clear what the ban will entail.

2026-09-18 · assertive framing · Trump threatens to ban CNN, MS NOW and Politico from the White House

🔮 The Governor of South Cotabato, Reynaldo Tamayo, said the two students killed were a boy and a girl.

2026-09-18 · assertive framing · Three dead and eight injured in Philippines school shooting

🔮 Experts have estimated it could take around three years to restore stocks of advanced missiles and defensive interceptors to pre-war levels.

2026-09-15 · assertive framing · US military says it is facing a shortfall in ammunition as a result of Iran war

Also by Harry Bligh

Netenyahu's Likud party alleges interference and fraud in Israel's election

2026-10-29 · Euronews

Support for UN vote to end US embargo on Cuba falls to 30-year low

2026-10-28 · Euronews

British PM Andy Burnham to meet Trump for the first time at the UN in New York

2026-09-22 · Euronews

Three South Korean soldiers injured in DMZ explosion, Seoul says

2026-09-21 · Euronews

Nothing else under this byline is closely related to this article, so these are simply their most recent.

All 10 articles by Harry Bligh →

Topics

Calif Google OpenAI PHP Wiz

Subjects

Calif ORG · 2× OpenAI ORG · 2× Amazon Threat Intelligence ORG · 1× European NORP · 1× France GPE · 1× Google ORG · 1× Interior Ministry ORG · 1× The Wikimedia Foundation ORG · 1× Wikipedia ORG · 1× Wiz ORG · 1×

Narrative

Government agencies and companies around the world shut down websites Wednesday after two critical flaws came to light involving PHP, a programming language that is the basis for a large share of the internet.

framing: assertive · carried by 1 article(s) · first seen 2026-10-22

🔮 Developers released emergency fixes on Wednesday, while cybersecurity authorities urged organisations to update affected systems immediately or take them offline until they could be secured.

2026-10-22 · Euronews

Websites go dark after AI exposes major programming language security flaw · assertive framing

Claims (19 extracted, 3 hedged)

that → shut → internet

Critical security flaws have been discovered in PHP, a widely used programming language that helps power around 70% of the world’s websites. asserted

that → discover → websites

Developers released emergency fixes on Wednesday, while cybersecurity authorities urged organisations to update affected systems immediately or take them offline until they could be secured. uncertain

they → release → them

The warning prompted governments, companies and major online services in several countries to temporarily shut down websites and other systems as a precaution. asserted

warning → prompt → precaution

The vulnerabilities were uncovered with the help of artificial intelligence. asserted

vulnerabilities → uncover → intelligence

Security firm Calif identified one of the flaws in August during an OpenAI-funded audit of PHP, while Google-owned cybersecurity company Wiz independently discovered and reported both vulnerabilities. asserted

Wiz → identify → vulnerabilities

OpenAI said its GPT-5.6 Sol model was used in the Calif research. asserted

model → say → research

The PHP security team rated both vulnerabilities 9.2 out of 10 for severity. asserted

team → rat → severity

Details were meant to remain confidential while developers prepared fixes, but information about the flaws emerged publicly before the planned release, intensifying the race to secure vulnerable systems. asserted

information → mean → systems

Security researchers initially reported little evidence of widespread exploitation before the vulnerabilities became public. asserted

vulnerabilities → report → exploitation

However, attempted attacks have since been detected, increasing concern that unpatched systems could be targeted. uncertain

systems → attempt → concern

Websites and services taken offline The Wikimedia Foundation, which operates Wikipedia, said it deliberately took a number of supporting services offline while security updates were installed and warned users that some disruption could occur. uncertain

disruption → take → users

Amazon Threat Intelligence also detected attempts to exploit the vulnerabilities, including activity before their public disclosure. asserted

Intelligence → detect → disclosure

Security researchers have since reported attempts to target vulnerable systems in the wild. asserted

researchers → report → wild

Several European governments have also taken precautionary action. asserted

governments → take → action

France’s Interior Ministry temporarily took prefecture websites offline while updates were applied, while Germany’s federal IT provider ITZBund shut down several government websites. asserted

provider → take → websites

German officials said the move was precautionary and that no security incidents had been identified. asserted

incidents → say → ?

Government and public-service websites were also taken offline in countries including the Netherlands and Finland, as authorities worked to secure their systems. asserted

authorities → take → systems

In the UK, the National Cyber Security Centre urged organisations running PHP to identify vulnerable systems, monitor them for suspicious activity and install security updates as soon as possible. asserted

Centre → urge → updates