Coverage dated October 20, 2026 to October 23, 2026

PHP code risk: Urgent security fix issued for code vital to estimated 70% of all websites

Headline from ABC 7 New York, from the development of Oct 21, 2026

Newest development Oct 23, 2026 · 4 reportsPHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat

The code vulnerability could allow attackers to take over servers, experts say.

ABC 7 New York's own description from its feed. We collect headlines and these descriptions, not full articles; read the original reporting below.

Developments in this update

6 dated developments, oldest first, newest marked. Each is named by one outlet's own headline; open its reports to see every outlet that covered it.

  1. PHP ships emergency patches for critical PHP2Shell flaws

    Headline from Bleeping Computer ·

  2. Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet

    Headline from WISH-TV Indianapolis ·

  3. Names this update

    PHP code risk: Urgent security fix issued for code vital to estimated 70% of all websites

    Headline from ABC 7 New York ·

  4. Websites down: what is PHP and how has it raised AI hacking fears?

    Headline from Digital Journal ·

  5. Hacking attempts surge after critical PHP flaws are disclosed

    Headline from Honolulu Star-Advertiser ·

  6. Newest

    PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat

    Headline from The Conversation US ·

2 reports not tied to one development ·

Reports & sources

78 articles, oldest first.

  1. Bleeping Computer

    PHP warns admins of two critical flaws, emergency patches coming tomorrow (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]

  2. Independent Journal Review

    PHP Flaws Prompt Website Shutdowns Amid Attack Surge (opens Independent Journal Review)

    Published

    Independent Journal Review's feed description

    Governments and other organizations in Finland, the Netherlands and elsewhere took websites offline after two critical vulnerabilities were found in widely used PHP software. Security experts reported emerging attacks and warned that the flaws could let hackers run code on servers and access data, p…

  3. Bloomberg

    Governments Take Websites Offline After PHP Security Warnings (opens Bloomberg)

    Published

    Bloomberg's feed description

    Governments in Europe are taking websites offline in response to warnings about critical security vulnerabilities in a programming language that underpins the internet.

  4. Tech Startups

    Critical PHP Security Flaws Leak, Triggering Emergency Patch Warning for Millions of Website — Apply Emergency Patch Today (opens Tech Startups)

    Published

    Tech Startups's feed description

    Millions of websites could face serious security risks after details of two critical PHP vulnerabilities leaked ahead of their planned disclosure, prompting an emergency patch announcement and urgent warnings to website administrators worldwide.

  5. Bleeping Computer

    PHP ships emergency patches for critical PHP2Shell flaws (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]

  6. BBC News

    Websites taken down across Europe ahead of critical cyber-security update (opens BBC News)

    Published

    BBC News's feed description

    Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.

  7. Inc.

    2 Critical Vulnerabilities Could Affect Millions of Websites. What to Do Right Now (opens Inc.)

    Published

    Inc.'s feed description

    The PHP Security Team has released updates that every website owner should know about.

  8. Off Grid Survival

    PHP Flaw Puts Most of the Internet at Risk: 70% of Websites Told to Go Dark or Get Hacked (opens Off Grid Survival)

    Published

    Off Grid Survival's feed description

    PHP Flaw Puts Most of the Internet at Risk: 70% of Websites Told to Go Dark or Get Hacked A critical PHP flaw hitting 70% of websites forced governments to shut down their own sites. Here’s how PHP2Shell affects you and how to protect your family.

  9. ABC News

    Urgent security fix issued for code vital to estimated 70% of all websites (opens ABC News)

    Published

    ABC News's feed description

    The code vulnerability could allow attackers to take over servers, experts say.

  10. Gizmodo

    ‘Expect Mass Attacks Within 15 Minutes’: Hackers Poised to Exploit Newly Discovered Website Flaws (opens Gizmodo)

    Published

    Gizmodo's feed description

    Two critical PHP security flaws could wreak havoc across millions of websites.

  11. Howtogeek

    Your favorite websites are down due to an internet-breaking PHP security flaw (opens Howtogeek)

    Published

    Howtogeek's feed description

    PHP flaws are prompting a scramble to fix major web pages.

  12. Deutsche Welle

    PHP developers say key patches available after global scare (opens Deutsche Welle)

    Published

    Deutsche Welle's feed description

    Newly discovered vulnerabilities in the PHP programming language have put millions of websites at risk, with government agencies sounding alarms and taking down sites. Developers say updating systems is "imperative."

  13. ABC 7 New York

    PHP code risk: Urgent security fix issued for code vital to estimated 70% of all websites (opens ABC 7 New York)

    Published

    ABC 7 New York's feed description

    The code vulnerability could allow attackers to take over servers, experts say.

  14. Quartz

    PHP releases patches for 2 critical flaws that AI helped researchers find (opens Quartz)

    Published

    Quartz's feed description

    Wiz said every PHP version released in the past decade is affected by at least one flaw, and that PHP powers 70% of websites

  15. Digital Journal

    Websites go dark worldwide as AI exposes critical security flaws (opens Digital Journal)

    Published

    Digital Journal's feed description

    PHP sits underneath popular web design platforms, so the weaknesses potentially affect a vast range of websites, from online stores and news outlets to government services.

  16. France 24

    Government and corporate websites go dark as AI exposes critical security flaws (opens France 24)

    Published

    France 24's feed description

    Government and corporate websites were shut down across the world overnight into Wednesday after cybersecurity firms used artificial intelligence to reveal critical flaws in widely used programming language PHP. PHP programmers on Wednesday released a patch fixing the vulnerability.

  17. Off Grid Survival

    Today’s Massive PHP Security Disaster Just the Beginning: AI, Hidden Exploits, and Cyberattacks That Will Bring Everything Down (opens Off Grid Survival)

    Published

    Off Grid Survival's feed description

    Today’s Massive PHP Security Disaster Just the Beginning: AI, Hidden Exploits, and Cyberattacks That Will Bring Everything Down A massive internet security crisis is unfolding as AI uncovers dangerous flaws hackers could exploit to cripple banks, power grids, and communications.

  18. MyNorthwest

    Some websites go dark as operators address an AI-detected flaw in a web programming language (opens MyNorthwest)

    Published

    MyNorthwest's feed description

    The FBI and the National Security Agency warned Wednesday about the discovery of two “critical vulnerabilities” in a widely used programming language that powers websites and web applications. The FBI’s cyber division said the vulnerabilities could allow malicious actors to remotely execute code in …

  19. The Boston Globe

    Some websites go dark as operators address an AI-detected flaw in a common web programming language (opens The Boston Globe)

    Published

    The Boston Globe's feed description

    PHP is a widely used programming language that powers many websites and web applications.

  20. Deseret News

    A just-revealed security flaw is hitting computer systems around the world (opens Deseret News)

    Published

    Deseret News's feed description

    Security experts using AI-powered analysis tools just revealed a pair of serious coding flaws that potentially impact 70% of the world’s computer systems, making them vulnerable to hackers who could use their own AI programs to exploit the weaknesses on a massive scale.

  21. The Guardian

    Flaw in PHP computer language leads to shutdown of websites around world (opens The Guardian)

    Published

    The Guardian's feed description

    Precautionary takedowns come as experts say bad actors could exploit vulnerability in language used by 70% of sites Websites around the globe have gone dark after a serious vulnerability was found in a computer language used to build much of the world wide web.

  22. Newsweek

    Critical PHP Flaws Threaten Millions of Websites in New AI Security Test (opens Newsweek)

    Published

    Newsweek's feed description

    Some organizations have temporarily taken websites and online services offline rather than leave vulnerable systems exposed.

  23. Mother Jones

    AI Helped Find a Critical Bug Affecting Huge Swathes of the Internet (opens Mother Jones)

    Published

    Mother Jones's feed description

    Newly announced vulnerabilities could affect broad swathes of the internet after being discovered by teams of cybersecurity professionals—with heavy AI assistance. The issues affect PHP, a widely-used open-source programming language that provides a foundation for content management systems like Wor…

  24. Engadget

    Government websites in the EU and Canada taken offline over PHP vulnerability (opens Engadget)

    Published

    Engadget's feed description

    All websites using PHP should update to the latest security patch.

  25. Axios

    AI uncovers massive flaw in web's foundational code (opens Axios)

    Published

    Axios's feed description

    Security officials are sounding the alarm over two critical vulnerabilities in a programming language used to run millions of websites, marking one of the most consequential cybersecurity discoveries yet made with AI.

Showing the first 25 of 57 headlines. ·

Identical headlines usually mean shared wire copy. They are counted as separate articles but are not independent confirmation.

Separate coverage close to this update in time and subject.