Published 16:17 21 Oct 2026 GMT+1 Some government websites have gone down in anticipation of attacks The internet could be grinding to a halt in front of our eyes as two critical vulnerabilities in the PHP (PHP Hypertext Preprocessor) programming language are being patched on October 21, 2026. As PHP is used by up to 75% of websites on the World Wide Web, the fact that they could be exposed to security vulnerabilities has led to a number of sites going dark in anticipation. PHP runs on a web server to generate dynamic page content, interact with databases, and handle backend application logic before delivering the final HTML output to our browsers. The European Union Computer Emergency Response Team has reiterated that the risk scores of these vulnerabilities “indicate the potential for unauthenticated remote code execution,” meaning hackers could install malware, swipe customer details, or even take down websites entirely as a major cybersecurity concern. What is the PHP patch advice? Some sites have taken themselves offline as a precaution (DIRK WAEM / Contributor / Getty) In the United Kingdom, the National Cyber Security Centre is telling organizations to “take immediate action to mitigate a security issue affecting PHP.” Organizations
Read More












