Cyber chiefs tell websites to apply a critical PHP safety update or go offline
The BBC reported on 21 October that cyber chiefs told websites to make a critical safety update or go offline. Two critical vulnerabilities have been identified with PHP, a programming language widely used across the web. The BBC report was published at 12:09 UTC. The summary available does not name the agency. It does not give the version numbers or a deadline.
PHP runs a large share of websites, so a flaw in it can expose many sites at once. Telling operators to go offline if they cannot patch signals the risk is high.
If you run a website built on PHP, the instruction is to apply the update. Visitors are not told to do anything.
The cyber chiefs’ view, as reported, is that the vulnerabilities are serious enough to justify taking sites offline.
Site operators who cannot patch quickly face a choice between downtime and exposure. The summary does not carry operators’ views.
Confirmed: two critical PHP vulnerabilities and the instruction to update or go offline. Not confirmed: any exploitation. Watch for further guidance.
DailyDrop U.K. edition No. 18 · Morning · THU., OCT. 22, 2026