PHP vulnerability prompts organisations worldwide to take websites offline

Governments and organisations took websites offline around the world after researchers disclosed a serious vulnerability in PHP, a programming language used by almost 70% of websites. The flaw could expose servers to attacks, prompting security agencies to urge organisations to install a patch or take affected systems offline.

A patch was issued on Wednesday, but experts warned that less-maintained websites could remain vulnerable for weeks or months. Temporary shutdowns affected sites in several European countries, including some UK council websites and systems run by the Wikimedia Foundation. The US National Security Agency warned the flaw could provide access to servers’ files or databases; experts also cautioned that criminals or state-backed actors might use compromised sites for further attacks.