South African Presidency website taken offline amid global cybersecurity threat

The official online presence of South Africa's Presidency has been put on hold due to a precautionary response to a global cybersecurity issue. This disruption occurred on October 23, 2026, as a result of a threat targeting internet servers that are using outdated versions of the PHP programming language. The Presidency informed the public on Friday that the site would be inaccessible until additional security measures could be implemented, without specifying the exact nature of the threat or providing a timeframe for the website's return.

The decision to take the site offline follows the release of emergency security updates by the PHP development team, aimed at resolving two critical vulnerabilities. These flaws posed the risk of enabling malicious code to execute on affected servers, even without the need for a login. Cybersecurity experts have recommended that organizations without immediate access to security patches consider isolating impacted systems from internet connectivity to minimize exposure.

Cloudflare, a provider of internet services and security solutions, observed increased traffic directed at these vulnerabilities at the time they were made public.

Security researchers have also been able to demonstrate techniques for exploiting applications built on PHP. While the Presidency has not confirmed whether its website was specifically targeted or if the PHP2Shell vulnerabilities were the direct cause of the shutdown, the incident underscores the ongoing challenge of safeguarding government systems against newly discovered software flaws.

Observations by South African technology publication TechCentral indicated that the Presidency's website was among a select few government sites that were taken down following this alert, whereas other state entities remained operational.

This situation emphasizes the critical importance of keeping software supported, applying security updates promptly, and continuously monitoring systems for any suspicious activity. For government websites, such disruptions can have significant implications, affecting the public's ability to access official communications and information.

As of the time of the announcement, the Presidency has not specified a date for the restoration of its website, stating that the site would remain inaccessible while the required protective measures are being carried out.