Photo via Evening Standard

‘Limited’ Government services temporarily offline amid PHP cybersecurity issue

Read the original at Evening Standard ↗
Cite

Wingate, S. (2026, October 22). ‘Limited’ Government services temporarily offline amid PHP cybersecurity issue. Evening Standard. https://www.standard.co.uk/news/tech/government-downing-street-work-press-association-b1301916.html

Dated from the outlet's own feed. Check the original for its byline.

Evening Standard · collected 2026-10-22 · by Sophie Wingate

Quick Summary

A critical security flaw in the programming language PHP has led to some limited government services being temporarily offline while fixes are implemented. The UK government spokesperson confirmed on Thursday that no major public-facing critical services have been affected but acknowledged potential exposures and ongoing work with international partners to address the issue. While there is no indication of a breach, the government declined to disclose which specific services may be impacted due to it not being standard practice.
Written by AI on 2026-10-22, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

As of October 21, 2026, critical vulnerabilities were discovered in PHP, a widely used web programming language, prompting European and British authorities to recommend that many websites temporarily go dark. This led to several major sites, including government pages in Europe, the BBC, and other organizations like Wikipedia and Pinboard, being taken offline on Wednesday morning as website operators scrambled to apply security updates or risk potential cyberattacks. The vulnerabilities, rated at a critical severity of 9.2 out of 10, could allow hackers to remotely execute code, potentially compromising sensitive data and networks. Reports suggest that up to 70% of the world's websites may be affected by these issues, as PHP underpins large parts of the internet infrastructure. The discovery underscores concerns about the rapid spread of AI in cybersecurity, with some experts calling it "one of the first areas where we are going to see the harmful impact of AI."

Written for “AI-detected PHP Security Flaw” on 2026-11-01, grounded in this article and the 26 other(s) covering the same event.

Story

📰 AI-detected PHP Security Flaw
Technology · 27 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 14% of its claims. Each row says how that neighbour differs.
Daily Mail
Hedges 8 of 36 claims Outlet record 68/100
Evening Standard
Hedges 5 of 30 claims Outlet record 65/100
Al Jazeera
Hedges 2 of 21 claims Outlet record 60/100
Dawn
Hedges 7 of 25 claims Outlet record 72/100
Evening Standard
Hedges 6 of 24 claims Outlet record 65/100
Euronews
Hedges 3 of 19 claims Outlet record 60/100
Dawn
Hedges 0 of 9 claims Outlet record 72/100
“Article A reports on initial efforts to address a PHP security flaw, while Article B discusses public advice given in response to the subsequent impact and concern raised by this issue.”
BBC News
Hedges 2 of 34 claims Outlet record 68/100
“While both articles discuss the PHP cybersecurity issue, Article A focuses on the impact on UK Government services, while Article B provides a broader perspective and includes statements from Microsoft's CEO about the global efforts to address the flaw.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
7
sentences that state something as happening or true
Uncertain
14%
1 of 7 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
65/100
Evening Standard's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
27
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-22 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Evening Standard · 7995 article(s) · 66 correction(s) detected
Running correction rate · 66 correction(s)

Who wrote this

Sophie Wingate
29 article(s) here · 1 carrying a prediction
🔮 “Often with a budget, people would have come home from work and said, ‘Well, this doesn’t help me.
🔮 The influential Institute for Fiscal Studies (IFS) think tank said the Budget’s “raft of fiddly measures” would do little to boost growth and warned it delayed tough decisions, and the left-leaning Resolution Foundation think tank said Mr Healey had “spread the jam thin”.
🔮 The influential Institute for Fiscal Studies (IFS) think tank said the Budget’s “raft of fiddly measures” would do little to boost growth and warned it delayed tough decisions, and the left-leaning Resolution Foundation think tank said Mr Healey had “spread the jam thin”.
🔮 “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.
🔮 “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from escalating strikes from the Iran-backed militant group.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from escalating strikes from the Iran-backed militant group, as the UK extends its military support to the kingdom.
🔮 RAF Typhoons will fly defensive missions to help protect Saudi cities and critical infrastructure from strikes from the Iran-backed militant group, as the UK extends its military support to the kingdom.
🔮 And as I said to Secretary Hegseth, in the words of Saint Francis of Assisi, ‘Where there is discord, may we bring harmony.’
🔮 The TUC called for an even bigger surcharge increase, to 16%, saying that could raise £24 billion in tax revenues over four years.
Also by Sophie Wingate
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 29 articles by Sophie Wingate →

Topics

Cloudflare Government No 10 OpenAI

Subjects

Government ORG · 2× Cloudflare ORG · 1× No 10 ORG · 1× OpenAI ORG · 1×

Narrative

The official told reporters: “Work has already taken place across Government to identify and fix potential exposures to our systems, and our experts are continuing to work closely with both OpenAI and international partners on this issue.
framing: assertive · carried by 1 article(s) · first seen 2026-10-22
🔮 “No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out.

Claims (7 extracted, 1 hedged)

Organisations around the world have been scrambling to fix a critical security flaw in the programming language PHP used by the majority of websites. asserted
Organisations → scramble → websites
No large UK public-facing critical services have been affected, a No 10 spokeswoman said on Thursday. asserted
spokeswoman → face → Thursday
The official told reporters: “Work has already taken place across Government to identify and fix potential exposures to our systems, and our experts are continuing to work closely with both OpenAI and international partners on this issue. asserted
experts → tell → issue
“No large public-facing critical services are being affected by the exercise, but some limited services may temporarily be offline while security work is carried out. uncertain
work → face → exercise
“But this does not mean they were hacked, and work continues to resolve any issues.” asserted
work → mean → issues
The spokeswoman said it was not “standard practice” to provide a list of Government services that were affected. asserted
that → say → services
It came after cybersecurity chiefs warned UK organisations on Wednesday that a “critical security issue” had been discovered in PHP, which is used by almost 70% of websites according cybersecurity firm Cloudflare. asserted
which → come → Cloudflare
💬Give feedback
🕘History 🎫Support