Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet
Websites Shut Down Globally After PHP Security Flaws Surface
Goldlaner.com – Websites shut down globally after two critical PHP vulnerabilities, collectively known as PHP2Shell, prompted organizations to take online services offline for emergency security work. PHP supports roughly 70% of websites worldwide, including many sites built with WordPress and Drupal.
Government agencies, news outlets, transport providers, banks and major online platforms were among those affected. Many outages were precautionary, but the response reflected concerns that the flaws could give attackers access to sensitive systems.
Government and Business Services Affected
In the United Kingdom, nearly three dozen government services became unavailable during security work, while four others operated only partially, government minister Elizabeth Lloyd told the House of Lords on Thursday.
No large public-facing critical services are being affected by the exercise but some limited services may temporarily be offline while security work is carried out.
Government websites in France, Denmark, Finland and the Netherlands were also briefly removed from public access as administrators applied fixes. The Dutch cybersecurity agency’s own website was among the services affected by the protective measures.
Dutch Prime Minister Rob Jetten said his cabinet was monitoring the situation. In Japan, Prime Minister Sanae Takaichi urged businesses to check whether their public-facing websites used PHP and prepare to install the update promptly. She said services should be suspended when necessary to reduce exposure.
Japanese airline ANA, railway company JR West and MUFG, the country’s largest bank, temporarily paused some webpages or services. These measures illustrated why websites shut down globally after the PHP flaws became public: operators were trying to patch systems before attackers could exploit them.
Why the PHP2Shell Vulnerabilities Matter
The PHP Foundation released patches and urged affected operators to update without delay. Researchers found the issues in late August, after the defects had remained in the software for years. The vulnerabilities were publicly disclosed on Wednesday after a fix had been prepared.
The PHP2Shell bugs could allow attackers to access website systems and inspect memory that may contain sensitive information, including passwords. They may also enable remote code execution, service disruption and exposure of customer information.
For site owners, an apparently functioning website is not proof that it is safe. The essential question is whether the underlying PHP environment has been updated and secured. Websites shut down globally after organizations determined that temporary downtime could be safer than leaving potentially vulnerable systems online.
Cloudflare, which worked with the PHP Foundation, Calif, OpenAI and Wiz on the response, said unpatched operators could face serious risks. Websites that process payments, account details, bookings or personal data may be especially exposed if attackers find a way to exploit the weaknesses.
AI Helps Identify Long-Hidden Security Defects
The discovery is also a significant example of artificial intelligence changing cybersecurity research. Teams from OpenAI, Google-owned cybersecurity company Wiz and cybersecurity company Calif identified the weaknesses. Wiz said AI helped researchers locate and address defects that had gone unnoticed in PHP’s codebase for more than a decade.
Researchers at Wiz used Google’s Gemini 4 Argon, Wiz Atlas and OpenAI’s GPT-5.6 Sol during the investigation. The company described the event as an AI inflection point, arguing that advanced models can reduce the time needed to understand complex software vulnerabilities.
FAQ: What Website Owners Should Do
What should I do if my website uses PHP? Check the PHP version and hosting environment used by your site, then apply the PHP Foundation’s security patches as soon as they are available for your setup.
Should a website be taken offline? A temporary suspension may be appropriate when an organization cannot patch quickly or needs time to verify its systems. The decision depends on the site’s exposure and the sensitivity of the data it handles.
Are WordPress and Drupal sites affected? PHP is widely used by both platforms, but the key issue is the PHP environment running the website. Site owners should verify that their hosting provider or server administrator has applied the necessary update.
Why did websites shut down globally after the disclosure? Organizations acted to limit the chance of attackers exploiting systems before security updates could be installed and verified.