ON
← Back to feed
What is PHP, the computer language that has shaken part of the world wide web?
France💻 TechnologyCenter11 hr. ago

What is PHP, the computer language that has shaken part of the world wide web?

Two critical security vulnerabilities were discovered in PHP, a widely used server-side programming language, prompting numerous websites to go offline on October 21, 2026. The affected sites include government portals, news outlets, and e-commerce platforms, which took precautionary measures due to the potential for large-scale cyberattacks. Although patches have already been released by developers, the incident highlights the significant reliance on PHP across the internet, with the language powering approximately 70 percent of identified server-side websites. Created over thirty years ago by Danish-Canadian engineer Rasmus Lerdorf, PHP has become the standard for generating dynamic web content, such as personalized user accounts and regularly updated news feeds. The disruption underscores the fragility of global digital infrastructure when foundational software components face severe security flaws.

Two critical security vulnerabilities discovered in the PHP programming language forced numerous government, commercial, and media websites offline on Wednesday, October 21. The flaws, identified by security firm Wiz, threaten a vast portion of the global web infrastructure because PHP underpins many popular web design platforms. Approximately 70 percent of websites with identifiable server-side code rely on this technology. In France, the Interior Ministry placed all prefectural websites into preventive maintenance mode following an alert from the national cybersecurity agency, ANSSI. This included the website for the Paris Police Prefecture. Other affected sectors include news outlets and online stores. The immediate response was driven by the severity of the threat. The vulnerabilities open the door to large-scale cyberattacks. Although patches have already been published, authorities prioritized taking sites offline to ensure safety before updates could be fully deployed. The French Interior Ministry stated that its teams were mobilized to perform update operations as soon as the security fix became available from the software publisher. The ministry described the action as a preventive measure requested by ANSS after the detection of a critical security vulnerability in a widely used generic software component. PHP was originally designed more than thirty years ago by Danish-Canadian engineer Rasmus Lerdorf for personal use. It has since become the default programming language for servers due to its free availability and relative ease of learning. The language generates dynamic web pages, which are either regularly updated, such as newspaper sites, or personalized based on user login data. While less known to the general public, it serves as an invisible pillar of the web. Its widespread adoption means that weaknesses in the core language can impact a diverse array of digital services simultaneously. Security experts noted that the discovery highlights the reliance of modern digital infrastructure on specific coding standards. The incident demonstrates how a flaw in a foundational tool can cascade through multiple industries at once. Government agencies worldwide reacted swiftly to mitigate potential risks. The situation underscores the importance of rapid patch deployment in maintaining digital stability. As organizations work to apply the necessary fixes, normal service is expected to resume once systems are verified secure. The episode has drawn attention to the underlying technologies that power daily online interactions. Users across Europe and beyond experienced temporary disruptions while these essential services underwent mandatory maintenance. The focus now shifts to ensuring all dependent systems are patched against future exploitation attempts.

How this report was made. Objective News wrote this report from 3 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

4 reports

20 Minutes logo20 MinutesIndependentCenterFactual 95Objective 9016 hr. ago
Cybersecurity: The websites of several prefectures are inaccessible after a critical alert from ANSI

The websites of several French prefectures, including the Paris Police Prefecture, became inaccessible on Wednesday afternoon following a critical security alert issued by the ANSSI, France’s national agency for information system security. The Ministry of Interior confirmed that this outage was due to preventive maintenance measures taken at the ANSSI’s recommendation after the detection of a critical vulnerability in a widely used generic software component. The ministry stated that the developer of the affected software had announced the vulnerability just hours prior to the shutdown. Authorities are currently waiting for the software publisher to release a security patch before restoring access to ensure safety. The Ministry assured that teams are fully mobilized to perform the necessary updates as soon as the fix becomes available.

Bias read (Center): The article reports on a technical cybersecurity incident affecting government infrastructure. While the subject involves state institutions, the content is purely operational and factual, relying on official statements regarding a software vulnerability. There is no political debate, partisan angle

Why factuality (95): This piece offers the most granular detail among the samples, citing the specific recommendation by ANSSI and quoting the Ministry of the Interior directly. These details are consistent with the other articles' descriptions of the event. The timeline (Wednesday afternoon) and the reason (critical vu

Why objectivity (90): The article maintains a neutral stance by relying heavily on direct quotes from official sources. It describes the situation as a 'digital iron curtain' in the lead, which adds a touch of color but remains within acceptable bounds for descriptive journalism. The rest of the text is purely informatio

Libération logoLibérationIndependentCenterFactual: no official source document/info detectedObjective 9513 hr. ago
Global Internet Failure: What is PHP, the computer language that powers nearly 70 percent of the world's websites?

Two security vulnerabilities were identified in PHP, a programming protocol widely used across the internet. A patch was released on Wednesday, October 21, to address these flaws. As a preventive measure against potential attacks, numerous websites had to be temporarily closed, including those operated by French prefectures. The article notes that this specific coding language powers approximately 70 percent of all websites globally.

Bias read (Center): The article reports on a technical cybersecurity issue affecting digital infrastructure. While the closure of government websites introduces a minor administrative dimension, the core subject is a software vulnerability and its remediation. The tone is purely informational, focusing on the technical

Why factuality: no official source document/info detected

Why objectivity (95): The writing style is concise and strictly factual. It avoids sensationalism and presents the information in a dry, objective manner suitable for a quick news update.

Le Figaro logoLe FigaroIndependent🔒CenterFactual: no official source document/info detectedObjective 9011 hr. ago
What is PHP, the computer language that has shaken part of the world wide web?

Two critical security vulnerabilities were discovered in PHP, a widely used server-side programming language, prompting numerous websites to go offline on October 21, 2026. The affected sites include government portals, news outlets, and e-commerce platforms, which took precautionary measures due to the potential for large-scale cyberattacks. Although patches have already been released by developers, the incident highlights the significant reliance on PHP across the internet, with the language powering approximately 70 percent of identified server-side websites. Created over thirty years ago by Danish-Canadian engineer Rasmus Lerdorf, PHP has become the standard for generating dynamic web content, such as personalized user accounts and regularly updated news feeds. The disruption underscores the fragility of global digital infrastructure when foundational software components face severe security flaws.

Bias read (Center): The article reports on a technical cybersecurity issue affecting web infrastructure. While government websites are mentioned as being affected, the core subject is the functionality and security of a programming language rather than political policy, governance, or partisan debate. The tone is expan

Why factuality: no official source document/info detected

Why objectivity (90): The tone is informative and journalistic. While the headline uses slightly dramatic phrasing ('fait vaciller' - made tremble/shake), this is standard media practice for high-impact tech news and does not constitute heavy bias. The text remains largely neutral in describing the technical situation an

Libération logoLibérationIndependentCenterFactual: no official source document/info detectedObjective 9014 hr. ago
Prefectures, taxes, the media... Dozens of sites blocked due to 'critical global security vulnerability'

French Interior Ministry services placed all prefecture websites into maintenance mode on Wednesday, October 21, following a security alert. The decision was made in response to a critical vulnerability affecting a widely used programming language globally. This incident has rendered dozens of government and other sites inaccessible, including those related to tax administration and media outlets. The move highlights significant cybersecurity risks associated with common software dependencies.

Bias read (Center): The article reports on a technical cybersecurity issue impacting government infrastructure. While the subject involves state institutions (prefectures), the tone is purely informational and factual, describing the maintenance action taken by authorities due to a global software flaw. There is no use

Why factuality: no official source document/info detected

Why objectivity (90): The tone is professional and serious. The opening phrase 'Rideau de fer numérique' (Digital iron curtain) is a metaphorical expression but fits the gravity of the security breach without being overly biased or emotional. The reporting focuses on official statements and actions, maintaining neutralit

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories