PHP is a programming language that serves up web pages for things like WordPress, Drupal, etc. - which a gobsmackingly huge number of sites on the internet use. Including government sites around the world. OpenAI was involved in discovering two vulnerabilities that allowed remote code execution on vulnerable installations, which is pretty much all of them, and Cloudflare has detected exploits taking place.
So a whole bunch of sites are going to be down entirely or producing errors while sysadmins are trying to patch things up. The maintainers of PHP have released fixes, but it takes time for things to get distributed and installed, so this could go on for a while.
Description of what's going on:
https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/
Gov't sites being down:
https://developers.slashdot.org/story/26/10/21/1644235/government-websites-go-dark-after-severe-php-vulnerabilities-disclosed
PHP disclosing the vulnerabilities:
https://tech.slashdot.org/story/26/10/21/054204/php-warns-it-plans-to-release-2-emergency-patches-imminently
So a whole bunch of sites are going to be down entirely or producing errors while sysadmins are trying to patch things up. The maintainers of PHP have released fixes, but it takes time for things to get distributed and installed, so this could go on for a while.
Description of what's going on:
https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/
Gov't sites being down:
https://developers.slashdot.org/story/26/10/21/1644235/government-websites-go-dark-after-severe-php-vulnerabilities-disclosed
PHP disclosing the vulnerabilities:
https://tech.slashdot.org/story/26/10/21/054204/php-warns-it-plans-to-release-2-emergency-patches-imminently