Governments Take Websites Offline After PHP Security Warnings

What happened

• Governments, schools, hospitals, banks and airlines took websites or digital services offline while organizations rushed to address two critical PHP vulnerabilities.
• PHP developers released patches after cybersecurity agencies urged immediate updates and advised organizations unable to patch to take affected sites offline.
• Cloudflare reported emerging attacks, while a cybersecurity company reported millions of hacking attempts after the vulnerabilities were disclosed.

Why it matters

The incident highlights operational, cyber-risk and business-continuity exposure for organizations relying on widely deployed open-source infrastructure. Financial institutions and other operators may face urgent patching, service disruption and technology-risk assessment requirements.

What to watch. Organizations should apply the PHP patches, monitor for malicious activity and take affected sites offline if they cannot patch immediately.

Timeline

1. EarlierOct 13
   Unicycive Deadline: UNCY Investors Have Opportunity to Lead Unicycive Therapeutics, Inc. Securities Fraud Lawsuit
2. EarlierOct 19
   Cloudflare’s AI Workspace Platform Partners with Leading Applications and Deployment Teams to Make AI Productive in the Enterprise
3. EarlierOct 20
   More than 10 Million Developers Are Building on Cloudflare
4. EarlierOct 20
   Mastercard opens early access to AI agent payments following pilots with Coinbase, Base and Cloudflare
5. First reported by Insurance JournalOct 21
   EU Cyber Agency Warns Websites May Go Dark as PHP Prepares Critical Fix
6. The Verge reportsOct 21
   A critical PHP vulnerability may take websites down today
7. Bloomberg reportsOct 21
   Governments Take Websites Offline After PHP Security Warnings
8. Techmeme reportsOct 21
   Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws (Reuters)
9. CNBC reportsOct 21
   Government websites in Europe and elsewhere go dark as software flaw sparks security scramble
10. Financial Times reportsOct 22
    Websites taken offline in race to patch PHP security flaw
11. The New York Times reportsOct 22
    Global Rush to Fix PHP Security Flaw Leaves Some Websites Offline

Who is involved

Sources (7)

1. Insurance JournalOct 21
   EU Cyber Agency Warns Websites May Go Dark as PHP Prepares Critical Fix
2. The VergeOct 21
   A critical PHP vulnerability may take websites down today
3. BloombergOct 21
   Governments Take Websites Offline After PHP Security Warnings
4. TechmemeOct 21
   Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws (Reuters)
5. CNBCOct 21
   Government websites in Europe and elsewhere go dark as software flaw sparks security scramble
6. Financial TimesOct 22
   Websites taken offline in race to patch PHP security flaw
7. The New York TimesOct 22
   Global Rush to Fix PHP Security Flaw Leaves Some Websites Offline

Related

• Oct 13 · Unicycive Deadline: UNCY Investors Have Opportunity to Lead Unicycive Therapeutics, Inc. Securities Fraud Lawsuit
• Oct 22 · OpenAI Helped Find Potentially Catastrophic Cyber Flaw
• Oct 22 · Web developers raise alarm bells over AI-driven cyberattacks
• Oct 20 · More than 10 Million Developers Are Building on Cloudflare
• Oct 20 · Mastercard opens early access to AI agent payments following pilots with Coinbase, Base and Cloudflare
• Oct 19 · Cloudflare’s AI Workspace Platform Partners with Leading Applications and Deployment Teams to Make AI Productive in the Enterprise