{
  "id": 15899268,
  "title": "Websites taken down across Europe ahead of critical cyber-security update",
  "url": "https://urgent.news/2026/10/21/websites-taken-down-across-europe-ahead-of-critical-cyber-security",
  "topic": "world",
  "section": "World",
  "published": "2026-10-21T14:09:28.000Z",
  "source": {
    "name": "BBC News",
    "slug": "bbc-news",
    "url": "https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o?at_medium=RSS&at_campaign=rss"
  },
  "original_language": "en",
  "account": "Websites across Europe have gone offline in preparation for a critical software update to the PHP programming language, which powers many online services. The update addresses two significant vulnerabilities in PHP, a widely-used language that underpins platforms such as WordPress, Drupal, Joomla, and Magento. Major organizations, including the Finnish government, Edinburgh council, BBC, the Netherlands National Institute for Public Health and the Environment, and the UK's National Cyber Security Centre (NCSC), have taken action to protect their online assets.\n\nPHP, a behind-the-scenes scripting language, enables the functionality users see when visiting websites. Security experts warn that the vulnerabilities could allow hackers to install malware and take down websites. The NCSC advises organizations to either apply the updates immediately or take their systems offline until the issue is fully mitigated. Finding and managing every instance where PHP is running is a complex task, given the language's pervasive use in various software and platforms.\n\nThe European Union Computer Emergency Response Team (CERT-EU) has highlighted the risk scores for the vulnerabilities, indicating the potential for unauthenticated remote code execution. This could enable hackers to install malware and take control of websites. Internet infrastructure firm Cloudflare is observing early attacks emerging and is updating mitigations as new vectors appear. The NCSC recommends continuous monitoring for security updates from third-party software vendors, including appliances and services that may bundle PHP.\n\nThe exact versions of PHP affected by the vulnerabilities are yet to be confirmed, but CERT-EU suggests that all versions dating back to PHP 5 onwards could be vulnerable. This update is a crucial step in maintaining the security and stability of the internet, as malicious actors continue to evolve their tactics.",
  "summary": "Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.",
  "key_points": [
    "Websites across Europe go offline for PHP update",
    "PHP vulnerabilities could allow malware installation",
    "NCSC advises immediate update or system shutdown"
  ],
  "editors_take": "The widespread offline status of major European digital services highlights the immense difficulty of securing the internet when a foundational programming language faces critical, pervasive vulnerabilities.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "MyJoyOnline Ghana",
        "title": "Websites taken offline across UK & Europe as ‘critical’ security flaw hits dozens of government sites",
        "url": "https://urgent.news/2026/10/21/websites-taken-offline-across-uk-europe-as-critical-security-flaw",
        "published": "2026-10-21T15:01:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}