Reuters
@Reuters8h
Some government websites in Europe and elsewhere went offline after vulnerabilities in PHP, a widely used programming language, were uncovered using AI. Cybersecurity Reporter Raphael Satter explains why reut.rs/4jyVubl

Oct 22, 2026 · 1:15 AM UTC

13
65
7
113
42,287
RelevantRecentLikes
how interesting that there is a security conference in NL this week and suddenly this “happens”
29
What hacker can get if people log in those website which r running?
111
Government sites knocked over by a PHP bug. Upgrade your stack, people.
61
The vulnerable code had been present for more than a decade. Seems not one hacker was interested.
73
Yeah PHP is how big brother and little brothers spy on you and apparently somebody’s AI program went rogue and turned the tables on some European government websites and surely some in the U.S. too … 😉
170
CISA and NSA both say take systems offline if you can't patch now. The fixes are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, for CVE-2026-109618 and -109619 (php.net, CISA, NSA).
65
What stood out to me is Amazon saying it caught people trying these flaws before they were even announced. OpenAI says it spent two months lining up fixes with PHP's maintainers and security companies. If you run a site on PHP, the update is worth doing tonight.
158