PHP powers a vast number of platforms, including online shops, Wikipedia and WordPress – the content management system behind many websites like blogs.When you visit a website like Wikipedia, PHP is the code that collects information you need and presents it in a way you can read on the web, Paul Spain, chief executive of Gorilla Cyber Security, told the BBC.But due to a flaw that could allow attackers to take control of affected web servers without authentication and steal sensitive data, everything built on PHP was left exposed.AI could make such attacks easier and faster, Spain said, estimating that the flaw could affect "millions and millions" of websites.It would be "disastrous" if hackers or countries weaponised the flaw and seized private data from websites, said cyber-security researcher Jill Slay from the University of Adelaide.What websites have been affected?The alert has disrupted services globally, from gaming platforms to government portals and online forums. That includes Wikimedia - the organisation behind the online encyclopaedia Wikipedia - which took down a number of its systems as a precautionary measure.
SRCBBC News - World
LANGEN
LeanCenter
WORDS177
ENT9
THU · 2026-10-22 · 03:48 GMTBRIEF NSR-2026-1022-120935
NSR-2026-1022-120935News Report·EN·Technology
What is PHP and why did it spark a global cyber-security scramble?
A significant cybersecurity vulnerability in PHP, a programming language that powers numerous platforms including Wikipedia and WordPress, has triggered a global response. The flaw, which could allow attackers to gain unauthorized control of web servers and steal sensitive data, has left millions of websites exposed.
2 hours agoShareSaveAdd as preferred on GoogleOsmond ChiaBusiness reporterBBC News - WorldFiled 2026-10-22 · 03:48 GMTLean · CenterRead · 1 min
BBC News - WorldFIG 01
Reading time
1min
Word count
177words
Sources cited
2cited
Entities identified
9entities
Quality score
100%
NEWSAR · AI
A significant cybersecurity vulnerability in PHP, a programming language that powers numerous platforms including Wikipedia and WordPress, has triggered a global response. The flaw, which could allow attackers to gain unauthorized control of web servers and steal sensitive data, has left millions of websites exposed. AI may accelerate the exploitation of this vulnerability, according to cybersecurity experts. The alert has disrupted services worldwide, prompting organizations like Wikimedia to take precautionary measures by disabling some of their systems. The potential for malicious actors or nations to weaponize this flaw poses a significant risk to private data.
Confidence 0.90Sources 2Claims 5Entities 9
Framing
Technology
National Security
Tone
Mixed Tone
AI-assessed
CalmNeutralAlarmist
Factuality
0.80 / 1.00
Factual
LowHigh
Sources cited
2
Limited
FewMany
01
It would be 'disastrous' if hackers or countries weaponised the flaw and seized private data from websites.
quoteJill Slay
Confidence
1.00
02
A flaw in PHP could allow attackers to take control of affected web servers without authentication and steal sensitive data.
factual
Confidence
1.00
03
PHP powers a vast number of platforms, including online shops, Wikipedia and WordPress.
factual
Confidence
1.00
04
The flaw could affect 'millions and millions' of websites.
statisticPaul Spain
Confidence
0.90
05
AI could make such attacks easier and faster.
predictionPaul Spain
Confidence
0.80
§ 04
Full report
1 min read · 177 wordsKey playerOppositionContextPositiveNeutralNegative
Organizations5
php
1.00
cyber-security
0.90
web servers
0.80
data theft
0.70
vulnerability
0.70
ai
0.60
wikipedia
0.50
wordpress
0.50
online shops
0.40
content management system
0.40
§ 07
Topic connections
Interactive graph Network visualization showing 6 related topics
View Full Graph Person Organization Location Event|Click node to navigate|Edge numbers = shared articles