PHP flaw prompts global website shutdowns
Flaw in PHP computer language leads to shutdown of websites around world
Thursday, 22 October 2026
Photo by James Harrison on Unsplash
Warm-up
- Have you ever seen a favourite website go offline? What happened?
- How quickly do you usually install updates on your devices? Why?
- What online services do you rely on most each day?
Vocabulary
- vulnerability
- a weakness in a system that attackers can use
- patch
- a software update that fixes a problem or adds a small change
- exploit
- to use a weakness to attack or enter a system
- precaution
- an action taken to prevent possible danger or harm
- database
- an organised collection of data stored on a computer
- reverse-engineer
- to analyse something to figure out how it works
- compromise
- to break into or damage the security of a system
- maintain
- to keep something working by checking and updating it
Reading
Listen to this story
British EnglishWebsites around the world were taken offline after a serious vulnerability was revealed in PHP, the computer language used by almost 70% of websites. Governments temporarily took down Belgian, Dutch, Finnish, French and German sites as a precaution while teams applied a patch. National security agencies in the US and UK warned that the flaw could let attackers reach a server's file system or database, and told organisations unable to patch immediately to take systems offline.
Major platforms depend on PHP. WordPress runs on it; Wikipedia and Slack use it; and Facebook has historically used it. The Wikimedia Foundation temporarily shut several systems to apply fixes. Experts fear hackers will try to exploit the bug quickly because AI tools can reverse-engineer it. Costin Raiu said a "race to exploit" could lead to mass compromise of vulnerable web servers. Prof Alan Woodward warned that poorly maintained websites may remain exposed for months. Research groups including OpenAI, Calif and Wiz said they helped identify the flaw.
Comprehension
- What computer language is at the centre of the flaw?
- Roughly what share of websites use this language?
- Which countries took some government sites offline as a precaution?
- What did security agencies advise if organisations could not patch at once?
- Why do experts expect fast attempts to exploit the bug?
Grammar focus
Future perfect
Use will have + past participle to show an action finished before a future time or event. Common signals: by + time/date, by then, by the time + clause, within + period, before + event. (Examples constructed.)
- By tonight, teams will have applied emergency patches.
- If scans speed up, attackers will have found weak sites.
Grammar exercise
Complete each sentence with the future perfect form.
- By tomorrow, many admins (secure) ___ their servers.
- Before patches arrive, bots (scan) ___ the web.
- Within 48 hours, vulnerable pages (be) ___ taken offline.
- By then, most guides (update) ___ their advice pages.
- By the time alerts go out, teams (identify) ___ attempts.
Discussion
- Was taking sites offline a good precaution in this case? Why or why not?
- How should organisations prioritise patching older, less maintained systems?
- Does AI make cyber risks grow faster than defences can? Explain.
- Which online services would you miss most if they went offline for a day?
Vocabulary, reading, and exercises with instant feedback
Spotted a mistake in this lesson? Tell us.