Global web disrupted as millions of sites patch critical PHP vulnerabilities
A critical vulnerability in the PHP programming language, which underpins 70% of the web, has triggered a global race to patch systems. Millions of websites, including 32 UK government services and major international sites, were temporarily taken offline as a precaution. While no confirmed breaches have been reported yet, experts warn the impact of the flaw may take months to fully manifest.
Key points
- A critical vulnerability in the PHP programming language, which supports roughly 70% of the world's websites, was discovered on Wednesday, prompting a global patching effort.
- In the UK, 32 government services were taken offline and four were partially unavailable, according to tech minister Baroness Lloyd of Effra, who attributed the disruption to precautionary measures.
- The UK’s National Cyber Security Centre sent 50,000 alerts to affected organizations, while the NSA urged US organizations to patch or disconnect vulnerable systems.
- Major websites including Wikipedia, the Internet Archive, and 4Chan were temporarily affected, alongside government sites in Germany, France, Belgium, Finland, and the Netherlands.
- No successful hacks have been confirmed yet, but cybersecurity experts warn that the full impact of the flaw could take months to become apparent.
- The UK government noted that no large public-facing critical services were affected, though the Office for Budget Responsibility took its site offline ahead of an upcoming budget.
A critical vulnerability in the PHP programming language has triggered a global race to patch systems, temporarily taking millions of websites offline. The flaw, which affects the back-end language used in web development for decades, was discovered on Wednesday and prompted organizations worldwide to pull their sites from the internet to apply security updates. PHP underpins approximately 70% of the world's websites, making the vulnerability a significant threat to global web infrastructure.
In the UK, the disruption was notable, with 32 government services taken offline and four partially unavailable, according to tech minister Baroness Lloyd of Effra. She told the House of Lords that the outages were largely precautionary measures taken while security updates were applied. The UK’s National Cyber Security Centre sent 50,000 alerts to affected organizations, while the NSA urged US organizations to patch or disconnect vulnerable systems. Major websites including Wikipedia, the Internet Archive, and 4Chan were also temporarily affected, alongside government sites in Germany, France, Belgium, Finland, and the Netherlands.
While no successful hacks have been confirmed yet, cybersecurity experts warn that the full impact of the flaw could take months to become apparent. The UK government noted that no large public-facing critical services were affected, though the Office for Budget Responsibility took its site offline ahead of an upcoming budget. The global response highlights the ongoing challenge of maintaining security in a web ecosystem heavily reliant on legacy code.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
