GoKawiilEU and Canadian government sites pulled offline after critical PHP vulnerabilities disclosed
The PHP Foundation issued an emergency security patch for two critical vulnerabilities in its widely used web programming language, prompting the Netherlands, Denmark, France and Finland to take some government websites offline as a precaution. Canada's Minister of Artificial Intelligence and Digital Innovation, Evan Solomon, confirmed Canada also took sites down temporarily and urged PHP users to update immediately. The flaws, present in PHP versions released over roughly 20 years, were reportedly discovered using AI tools employed by cybersecurity firms.
GoKawiil's interpretation of the reporting above, not reported fact.
PHP underpins major platforms like WordPress and Drupal, so a flaw of this scope touches a huge share of the internet, as Drupal Association interim CEO Tiffany Farriss noted. The fact that AI-assisted discovery surfaced vulnerabilities that persisted for two decades suggests such tools may increasingly reshape how security researchers find long-hidden bugs. The US response so far has been limited to a CISA advisory, which could leave questions about whether American government systems face the same exposure as their European and Canadian counterparts.
- PHP Foundation released patches for two critical vulnerabilities affecting roughly 20 years of PHP versions.
- Government websites in the Netherlands, Denmark, France, Finland and Canada were temporarily taken offline as a precaution.
- CISA urged US organizations to update, while the White House said it learned of the issue on Friday.
Source: engadget.com — Anna Washenko, 2026-10-21
Published there as: “Government websites in the EU and Canada taken offline over PHP vulnerability”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.