TechTECH WATCH
PHP flaws found with AI take websites offline worldwide
The two PHP2Shell flaws were disclosed publicly Wednesday after a fix was ready, and government sites in six European countries still went offline; patching, it turns out, is optional.
Watch it as it aired: Gloria Vance on this story, from BBN After Hours at 3:52 AM ET. Cartoon anchors, real headline: the facts are Japan Today's, the jokes are ours.
Watch the segment
At a glance
- First reported by Japan Today: “Websites down: What is PHP and how has it raised AI hacking fears?”, with reporting from Al Jazeera, CNN, Global Banking & Finance Review (Reuters), The National and RTÉ.
- Covered on BBN on Thursday, October 22, 2026, at 3:52 AM ET on BBN After Hours, by Gloria Vance.
- Topics: PHP, AI.
- BBN covered this story before: AI Helps Find and Fix Critical Flaw in PHP Before Attackers Do (October 21).
The real story
The reporting behind this segment. The headlines belong to the outlets; read the original before you believe or share anything.
- Japan TodayWebsites down: What is PHP and how has it raised AI hacking fears?
- Al JazeeraWorld leaders warn of security flaws found in PHP programming language October 22, 2026 · facts used on air
- CNNGlobal websites shut down after AI found a critical flaw affecting 70% of the internet October 21, 2026 · facts used on air
- Global Banking & Finance Review (Reuters)AI-Discovered PHP Vulnerability Forces Government Sites Offline October 21, 2026 · facts used on air
- The NationalPHP security issues: Websites go offline amid critical update October 21, 2026 · facts used on air
- RTÉWebsites go dark as AI exposes critical security flaws October 21, 2026 · facts used on air
What BBN said about it

Gloria Vance · World News AnchorTwo flaws in PHP, found with help from AI models, were made public Wednesday after a fix was ready, and government sites across Europe went dark anyway.

Gloria Vance · World News AnchorWith me is Marguerite Sallow, author of Click Later. Thanks for being here.
Marguerite SallowThank you, Gloria. And I predicted this, and also the opposite. I have dismissed eleven update reminders this week, and I'd say that's a position.

Gloria Vance · World News AnchorSo let me ask you about August eleventh, because that's when researchers at a firm called Calif, working with OpenAI, reported the first flaw.

Gloria Vance · World News AnchorThe fix was ready. Why were sites still exposed?
Marguerite SallowBecause patching is a commitment, and commitment is how you get hurt.
Marguerite SallowTwelve reminders now, actually, I just dismissed one, and my sticky note says remind me tomorrow.

Gloria Vance · World News AnchorThe Dutch cybersecurity agency took itself offline, according to Reuters. The people who warn you about the fire left the building first.
Marguerite SallowAnd honestly, a website nobody can reach is the most secure website there is. That's what I call a fast update.

Gloria Vance · World News AnchorA cybersecurity expert says PHP runs about seventy percent of websites. So your plan is to be very secure, and very alone.
Marguerite SallowThe NSA said take systems offline if an update isn't feasible, so I'm basically government policy. Thirteen reminders.

Gloria Vance · World News AnchorBut you didn't answer the question. What language does your own website run on?
More Shorts
All videos →The story so far
- Storm Austen warnings, PHP patch, Raphinha's rise · BBC
- AI Helps Find and Fix Critical Flaw in PHP Before Attackers Do · The New York Times
- PHP flaws found with AI take websites offline worldwide (this story)
From the archive: everything BBN aired on Thursday, October 22, 2026 · the Tech archive · all months

Photo: Scott Andrews, Canon · Public domain · Wikimedia Commons · altered by BBN
Photo: Matt Brown · CC BY 2.0 · Wikimedia Commons · altered by BBN
Photo: Photographer: Lukasz Kobus (European Commission) · CC BY 4.0 · Wikimedia Commons · altered by BBN
Photo: Science Museum London / Science and Society Picture Library · CC BY-SA 2.0 · Wikimedia Commons
Photo: Daniel Lu ( User:dllu ) · CC BY-SA 4.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 4.0
