Skip to the story
All StoriesPoliticsConflict & SecurityBusiness & EconomyScience & TechHealthClimateMedia
All stories
Conflict & Security491 outlets ran this4 min read

PHP Security Vulnerability Leads to Website Shutdowns

A critical flaw in the widely used programming language has prompted global alerts and precautionary website closures.

AI-assisted coverage comparison, editor-supervised · How this was made

Published
Developers of PHP are urging website operators to update their software to patch two major hacker vulnerabilities. (Reuters: Annegret Hilse)

What this story says

  • A serious security vulnerability has been identified in the PHP programming language, which underpins a significant portion of global websites and online services.
  • Numerous government agencies, companies, and institutions have taken websites offline as a precautionary measure.
  • Cybersecurity authorities in several countries have issued warnings and alerts regarding the vulnerability.
  • PHP developers have released or are preparing to release patch versions to address the vulnerabilities.

Who covered it

Left 31%(66)Centre 40%(84)Right 29%(61)

Percentages are shares of the 211 outlets carrying a published leaning rating. 280 of the 491 outlets we know ran this story carry no rating and are not counted in them. Coverage measured .

Trust

42/100

Craft

60/100

Hype

55/100

491 sources · methodology

A critical security vulnerability has been discovered in the PHP programming language, affecting a large percentage of websites and online services worldwide. In response, many government agencies, companies, and institutions have temporarily taken their websites offline. Cybersecurity authorities across several nations have issued warnings and alerts concerning the discovered flaws. PHP developers have begun releasing or are preparing to release patch versions to fix the vulnerabilities.

Disagreements in reporting

While most reports agree on the discovery of critical vulnerabilities in PHP and subsequent website shutdowns, the specific entities affected and the role of artificial intelligence in the discovery vary. The Korea Times and Vanguard News state that AI exposed the flaws, while Haberler also mentions AI's role. However, other reports, such as those from Kurier, Digi 24, El Tiempo, Berliner Morgenpost, Liberation, Ekstra Bladet, El Mundo, Tech Radar, rtl.lu, Protothema, La Dépêche du Midi, merkur.de, NWT, Dagens Nyheter, Meduza, TF1 INFO, RTS, Welt, The Local - Fr, saarbruecker-zeitung.de, Hamburger Abendblatt, ARY News, Newser, The Register, and Westdeutsche Allgemeine Zeitung, do not mention AI in relation to the discovery. Regarding specific shutdowns, The Korea Times and Vanguard News mention government agencies and companies globally, while Liberation and La Dépêche du Midi focus on prefectures and tax sites in France. Meduza and Welt refer to European governments and federal states respectively.

What the coverage left out

None of the left-rated digests mention the specific role of artificial intelligence in discovering the PHP vulnerabilities, although some left-rated reports from other sources did. The centre-rated digests do not mention the role of artificial intelligence in the discovery of the vulnerabilities. None of the right-rated digests mention the role of artificial intelligence in the discovery of the vulnerabilities.

Tags:#Cybersecurity#PHP#Websites#Vulnerability#TechNews

Still developing. We have re-checked which outlets are covering this 1 time, most recently on 21 Oct 2026, 18:15, and will add the sides that appear.

How other outlets pictured it

Which photograph to run is each newsroom’s own choice. The leaning beside a name is that outlet’s published rating, not a claim that the pictures divide along it. Every picture is shown from the outlet’s own server and links to the article it ran in.

A man uses a computer keyboard in Toronto in this Sunday, Oct. 9, 2023 photo illustration. THE CANADIAN PRESS/Graeme Roy
CTV NewsCentre
PHP Security Vulnerability Leads to Website Shutdowns
The HinduLeft

How each side covered it

Our own reading of the reporting listed below, written from the outlets’ articles rather than quoted from them. The reasoning is set out on our methodology page.

Left

66 rated outlets

  • Left-rated reports highlighted the global nature of the shutdowns and the impact on government services. The Korea Times and Vanguard News led with "Websites Go Dark Worldwide as AI Exposes Critical Security Flaws," emphasizing that government agencies and companies globally shut down websites. Liberation reported on "Preventive Maintenance" affecting "Websites of All Inaccessible Prefectures," noting that French Interior Ministry services took down sites following a security alert. La Dépêche du Midi focused on "Security Falsities, Emergency maintenance... Why Are Tax Sites and Several Prefectures Inaccessible?" and mentioned disruptions after the discovery of major security flaws. Meduza's headline stated, "In the PHP Programming Language, Two Critical Vulnerabilities Were Identified, Which Led European Governments to Shut Down Their Websites." The Local - Fr reported that "French government websites down after hacking alert," listing major sites including the tax office and weather forecaster. Newser's headline, "It's 'One of the Most Impactful Security Issues in Recent Memory'," quoted a description of the severity of the flaw and noted that PHP powers how web servers process code, being used in 69% of all websites.

Centre

84 rated outlets

  • Centre-rated reports focused on the widespread impact and the precautionary measures taken. Digi 24's headline was "A Major Security Breach: Websites Around the World Have Been Blocked. PHP Programming Language Is Affected, Very Widespread," stating that a serious vulnerability endangers the foundation of numerous websites. Ekstra Bladet reported that "Websites Exposed After 'Serious Vulnerabilities'," noting shutdowns due to a potential security risk affecting websites using PHP. Tech Radar's headline, "Website admins across the world bracing for impact following major PHP flaw reveal," indicated that PHP developers notified the community of critical flaws and a patch was imminent. Merkur.de reported under the headline "Global IT Security Gap: Authorities Turn Off Websites, BSI Warns," noting that authorities were taking websites offline and hosters were sounding alarms. TF1 INFO's headline, "'Critical Vulnerability': Prefectural Websites Rendered Inaccessible by a Global Security Flaw," detailed that prefectural websites were inaccessible at the request of Anssi following the detection of a critical vulnerability. RTS reported that "Cybersecurity: Two Major Flaws Discovered in PHP," noting that faults prompted many official, state, private or institutional sites to go offline as a precautionary measure. Saarbruecker-Zeitung.de's headline, "Also Affected by Saarland Offers: Serious Security Gap Threatens Millions of Websites," highlighted that blogs, online shops, and news portals could be targeted and that the PHP gap allows for server takeovers.

Right

61 rated outlets

  • Right-rated reports often highlighted the critical nature of the vulnerability and the resulting shutdowns. Kurier's headline was "Critical Situation: Serious Vulnerability Threatens Million Websites," stating that the widespread programming language PHP is affected. Berliner Morgenpost reported under "Worldwide IT Security Gap: Numerous Websites Disabled," noting that a serious security vulnerability in PHP causes websites to be shut down worldwide and that authorities and IT experts are sounding the alarm. El Mundo's headline, "Government Websites in Various Parts of the World Cease to Function Due to Software Failure Leading to a Security Crisis," indicated that government websites in Europe and elsewhere were out of service. Protothema reported that "Government and Other Websites in Europe Offline Due to Serious Programming Language Bug," and that PHP language creators released patch versions. Dagens Nyheter and NWT shared the headline "Security Holes Cause Authorities to Shut Down Websites," stating that millions of websites are under threat and that several countries have shut down government websites. Welt's headline, "Engraving Security Gap Discovered, Several Federal States Turn Off Websites," noted that a drastic security gap forces numerous institutions to take their websites offline. ARY News reported that "Cyber agency warns websites may go dark," mentioning that government websites in Europe and elsewhere went offline after the disclosure of critical vulnerabilities.

Questions about this coverage

How did the left and right cover PHP Security Vulnerability Leads to Website Shutdowns?
Of the 211 outlets on this story carrying a published leaning rating, 31% are rated left, 40% are rated centre, 29% are rated right. Those percentages are shares of the rated outlets, not of every outlet that ran it, which was 491. The sections above set out what each side emphasised, in its own terms.
Is PHP Security Vulnerability Leads to Website Shutdowns left or right?
Neither side dominates it. Of the 211 rated outlets on this story, 31% are rated left, 40% are rated centre, 29% are rated right, and no side holds the 70% this site would want before calling a field one-sided. A story is not left or right in any case; the outlets that carried it are what carry ratings.
Is the coverage of PHP Security Vulnerability Leads to Website Shutdowns biased?
PHP Security Vulnerability Leads to Website Shutdowns is one event reported by 491 outlets, and this page does not rate the story as biased or unbiased. What it publishes is the spread: which outlets ran it, where named rating organisations place each of them on the spectrum, and what each side chose to lead with. A leaning rating describes an outlet's record over time, not this article, and the two should not be run together.
Which outlets covered PHP Security Vulnerability Leads to Website Shutdowns?
491 that we know of, every one of them listed further up this page with a link to its own report and to what we hold on the publisher. Nothing here is a summary of somebody else's summary: the outlets are named so the original reporting can be read.
What is the PHP programming language?
PHP is an open-source scripting language widely used for web development. It is designed primarily for server-side programming, meaning it runs on the web server to generate web pages. Reports indicate it is the basis for a large share of the internet, powering everything from simple blogs to complex online services.
Why have websites been taken offline?
Websites have been taken offline as a precautionary measure due to a serious security vulnerability discovered in the PHP programming language. This flaw could potentially allow attackers to compromise servers and gain unauthorized access, prompting authorities and organizations to shut down services to prevent exploitation.
Are there patches available for the PHP vulnerability?
Yes, PHP developers have released or are preparing to release patch versions to address the discovered vulnerabilities. Cybersecurity authorities have issued warnings, and the availability of these patches is crucial for restoring affected websites and services safely.

Read it at the source

493 outlets, grouped by the leaning a published rating gives them. Every headline links to the original; an underlined outlet name opens our profile of that publisher.

Left

67
Show 59 more

Centre

84
Show 76 more

Right

61
Show 53 more

Not rated

281
Show 273 more

How did this read?

About the coverage, not about the story. We do not ask whether you agree with what happened — we have no honest use for that answer.

More in Conflict & Security

All Conflict & Security →
Russia Has Up to 700 Ballistic Missiles, 6,200 Attack Drones Ready to Strike Ukraine, Intelligence Says3 min readUkraine Intelligence: Russia Has 700 Ballistic Missiles in ReserveRead storyUn immeuble résidentiel endommagé par une attaque de drone à Kiev (Ukraine), le 21 octobre 2026. (SERHII OKUNEV / AFP)3 min readFour Killed in Russian Strikes on Ukraine Energy InfrastructureRead storyUnauthorized drones flew over French military sites during exercise2 min readUnauthorized drones flew over French military sites during exerciseRead story
PHP Security Vulnerability | MediaBias News