The discovery of critical PHP vulnerabilities led to government websites in Europe being taken offline to prevent potential cyberattacks.

"Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in PHP sent ‌website operators scrambling to protect their systems. Developers of the PHP programming language said Tuesday they had identified two critical vulnerabilities" https://www.reuters.com/world/asia-pacific/eu-agency-warns-websites-may-need-be-taken-offline-php-prepares-patches-2026-10-21/ #PHP

Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws (Reuters) https://www.reuters.com/technology/websites-taken-offline-over-php-risks-2026-10-21/ http://www.techmeme.com/261021/p36#a261021p36

Hey! Five alarm #infosec fire! Government websites across Europe have been taken offline following the discovery of two critical security vulnerabilities in PHP, a programming language that underpins a massive portion of the internet. On October 21, 2026, PHP developers announced emergency patches fixing two flaws (tracked as CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote code execution, giving hackers the ability to take control of servers. PHP is pervasive. It serves as the underlying engine for major content management systems like #WordPress, #Drupal and #Joomla. Cybersecurity teams globally are being urged to immediately isolate any vulnerable, internet-facing PHP servers until official emergency updates (PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35) can be manually deployed. Cloudflare has implemented temporary firewall mitigation rules, but experts stress this is only a stopgap measure. Go patch your #php. Now. https://www.globalbankingandfinance.com/cyber-agency-warns-websites-go-dark-php-prepares-critical/