PHP security flaw linked to government and business sites going offline, per press reports
What happened
Headlines from The New York Times, The Wall Street Journal and CNN describe a PHP-related internet security threat that has reportedly taken government and business websites offline. The provided headlines do not mention Cloudflare directly, so its role is unconfirmed.
When it started
The URLs suggest the articles were published around 22 to 23 October 2026. CNN's headline says the threat had been known for 22 years and became a crisis in two days.
How it spread
The provided headlines do not explain the mechanism in detail. The WSJ headline says AI-driven hacks are arriving quickly and overwhelming the internet, and CNN ties the escalation to AI.
Why it matters
According to the headlines, AI has accelerated attacks that exploit a long-known weakness, which the reports present as a major internet security concern. Further details would need to come from the full articles.