Websites taken down worldwide as critical PHP cyber-security update issued
A critical security vulnerability in the PHP programming language has forced governments and major organizations, including the BBC and Wikipedia, to take websites offline. The flaw, identified by AI, is considered one of the most severe ever discovered, prompting urgent global patching efforts.
Why it matters
The incident highlights the fragility of the internet's infrastructure and the increasing role of AI in both discovering and potentially mitigating massive cyber-security threats.
Image source, Getty Images By Tom Gerken and Laura Cress , Technology reporters and Joe Tidy , Cyber correspondent, BBC World Service Published 21 October 2026 International governments and agencies have urged websites to address two critical cyber-security flaws in a programming language which powers much of the internet.
The vulnerabilities were found within the PHP programming language, with a fix issued on Wednesday afternoon.
Multiple cyber-security agencies have urged organisations unable to apply fixes in time to consider taking their sites down, leaving bodies such as the Finnish government, Edinburgh council and the BBC to take pages offline.
The flaws were discovered by AI, with cyber-security firm Wiz saying they were the "most severe vulnerabilities ever discovered" by the tech, which is reshaping the cyber landscape.
Headlinne story · 7 newsrooms
Global Websites Go Dark After AI Uncovers Critical Programming Language Flaws
What every outlet reported, where they differ, and how each framed it →
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in