Government websites, public services and major online platforms have been taken offline across several countries after cybersecurity researchers uncovered two critical vulnerabilities in PHP, the programming language used by much of the internet. Security agencies warn that criminals and state-backed hackers could exploit the weaknesses to gain control of vulnerable servers.
The emergency began on Tuesday, 20 October, when details of the vulnerabilities became public. By Wednesday, authorities in France, Germany, Belgium, Finland and the Netherlands had temporarily disabled websites while administrators rushed to install security updates.
The incident has exposed the dependence of global digital infrastructure on a relatively small number of widely used technologies.
A vulnerability affecting millions of websites
PHP is an open-source programming language used by popular publishing platforms, including WordPress, Drupal and Joomla.
According to web technology statistics, PHP powers approximately 70% of websites whose server-side programming language can be identified.
The two vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious code remotely without authentication.
Successful exploitation could potentially expose confidential information, compromise databases or give attackers control of affected systems.
Governments take precautionary action
European cybersecurity authorities urged organisations to install emergency patches immediately.
Several government websites were temporarily suspended, including public services in Finland and the Netherlands.
British local authorities also reported disruptions, while the Wikimedia Foundation took selected systems offline as a precaution.
The shutdowns did not necessarily indicate successful cyberattacks. Many organisations acted before any compromise was detected.
Artificial intelligence discovers the weaknesses
The vulnerabilities were identified through cybersecurity research involving artificial intelligence.
Researchers working with companies including OpenAI and Wiz demonstrated how advanced AI systems could uncover weaknesses that had remained undetected for years.
The discovery illustrates the growing influence of artificial intelligence in cybersecurity, both as a defensive technology and as a potential tool for attackers.
A race against cybercriminals
PHP developers released emergency security updates on Wednesday, 21 October.
However, experts warn that millions of websites may remain exposed until administrators install the necessary fixes.
Smaller organisations and websites running outdated software are considered particularly vulnerable.
Security specialists fear attackers could increasingly automate attempts to exploit unpatched systems.
A warning for the digital economy
The incident raises broader questions about the resilience of internet infrastructure.
Financial institutions, online retailers, news organisations and government agencies depend on software components that require continuous maintenance.
Although emergency patches are available, their effectiveness depends on how quickly website operators respond.
For businesses worldwide, the lesson is clear: cybersecurity is no longer simply a technical concern but a fundamental requirement for operational continuity and digital trust.
NewsHub Finance | Technology & Cybersecurity | 22 October 2026
Government websites, public services and major online platforms have been taken offline across several countries after cybersecurity researchers uncovered two critical vulnerabilities in PHP, the programming language used by much of the internet. Security agencies warn that criminals and state-backed hackers could exploit the weaknesses to gain control of vulnerable servers.
Recent Comments