Websites across Europe were temporarily taken offline following the issuance of a critical cyber-security update addressing severe flaws in PHP, a programming language widely utilized across the internet. National agencies and public organizations moved swiftly to implement software fixes after security researchers revealed two major vulnerabilities that had reportedly remained undetected for more than a decade.
The security flaws were uncovered by researchers at cybersecurity firms Calif and Wiz using advanced frontier models developed by OpenAI. Security experts characterized the discovered issues as among the most severe ever identified by artificial intelligence technology. Wiz highlighted that modern frontier models were instrumental in making the discovery process practical, allowing researchers to rapidly develop and adapt working exploits across multiple distinct applications within hours.
In response to the identified risks, national cyber-security authorities including the United Kingdom's National Cyber Security Centre, along with counterparts in the European Union, Australia, and Japan, strongly urged organizations relying on PHP to apply the newly issued software updates immediately. Agencies advised that where immediate remediation was not feasible, organizations should consider taking vulnerable systems offline temporarily until full mitigation could be achieved.
The impact of the advisory was quickly felt across public infrastructure. The Finnish government temporarily shut down its public web services, while the Netherlands' cyber-security agency took its own website offline alongside other government portals, including the lower house of parliament and a national health institute. Additionally, regional services such as the Edinburgh council website and several online pages for BBC programmes experienced outages.
Cyber-security officials warned that early exploitation attempts were beginning to emerge, necessitating rapid industry-wide vigilance. Because PHP underpins vast portions of the modern web infrastructure, powering numerous content management systems, shared hosting platforms, and backend administrative tools, the emergency updates represent a major challenge for organizational network readiness and software maintenance protocols globally.