{
  "id": 16039971,
  "title": "What’s going on with the web? The PHP issue and sites going offline",
  "url": "https://urgent.news/2026/10/22/whats-going-on-with-the-web-the-php-issue-and-sites-going-offline",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T12:10:22.000Z",
  "source": {
    "name": "9to5Mac",
    "slug": "9to5mac",
    "url": "https://9to5mac.com/2026/10/22/whats-going-on-with-the-web-the-php-issue-and-sites-going-offline/"
  },
  "original_language": "en",
  "account": "A significant number of websites have gone offline, not due to a service outage, but rather as a result of an intentional decision by site owners. The issue stems from dangerous security vulnerabilities found in a protocol commonly used by websites – PHP. This problem is unrelated to a previously discovered vulnerability in web certificates. PHP is a versatile, open-source scripting language that is widely used for web development, with around 70% of all websites incorporating it. In mid-August, an AI model and a cybersecurity researcher simultaneously discovered a major security flaw in PHP. By exploiting two vulnerabilities, an attacker could gain direct access to a website's underlying file system or database, potentially exposing personal data. Disclosure of the vulnerabilities was embargoed until this week, though the information leaked two days early. However, not every website has been able to apply the patch yet. Amazon Web Services reported that the vulnerabilities are being \"broadly exploited\" across the internet. The NSA has advised that unpatched sites should be taken offline until the issue is resolved. Consequently, numerous commercial and government websites have gone offline while updating PHP on their servers. The reporter confirms that 9to5Mac and its sister sites are currently protected.",
  "summary": "A significant number of websites have gone offline, and that’s not due to a service outage, but rather a deliberate decision by the site’s owners. The reason is because extremely dangerous security vulnerabilities have been found in a protocol used by most websites – PHP. This issue is unrelated to the separate vulnerability discovered in web certificates … more…",
  "key_points": [
    "PHP security flaw affects 70% of websites",
    "Attackers could access file systems and databases",
    "Many sites offline while updating PHP"
  ],
  "editors_take": "The decision to take websites offline reflects a shift toward prioritizing data security over constant availability as administrators race to patch critical vulnerabilities in a ubiquitous web language.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}