Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet
Global Websites Pause Services as PHP Security Fixes Roll Out
Healfromzero.com – Government portals, corporate websites and online services in several countries temporarily suspended parts of their operations as administrators moved quickly to address two critical vulnerabilities in PHP, one of the internet’s most widely deployed programming languages.
The flaws, collectively known as PHP2Shell, drew urgent attention because PHP supports roughly 70% of websites worldwide. The language remains a core component of countless web services and is used by platforms including WordPress and Drupal. Security researchers warned that the bugs could give attackers a route to access website memory, potentially exposing sensitive material such as passwords, and in some cases enable remote code execution or service disruption.
The PHP Foundation has issued patches and urged operators to install them without delay. The US National Security Agency and the European Union’s cybersecurity agency have also called for immediate action.
Public services temporarily affected
In the United Kingdom, nearly three dozen government services were unavailable during the security work, while four others were operating only in part. Government minister Elizabeth Lloyd told the House of Lords that the interruptions were linked to the upgrade effort.
No large public-facing critical services are being affected by the exercise but some limited services may temporarily be offline while security work is carried out.
Temporary outages also appeared across Europe. Government sites in France, Denmark, Finland and the Netherlands were taken offline while fixes were applied. The Dutch cyber security agency was among the affected organizations.
Dutch Prime Minister Rob Jetten said his cabinet was closely watching developments around the PHP weaknesses. In Japan, Prime Minister Sanae Takaichi encouraged organizations to determine whether their public websites use PHP and prepare to deploy the security update promptly.
Please check if your publicly available websites use PHP, and prepare to apply the fix patch that will be released tonight… as soon as possible.
Japan’s ANA airline, JR West railway operator and MUFG, the country’s largest bank, each disclosed temporary interruptions affecting certain webpages or services as protective measures were put in place.
News, nonprofit and consumer-facing sites take precautions
Irish news outlet The Journal briefly went offline on Thursday morning while it strengthened its defenses. The outlet is Ireland’s second most-used online news source, behind RTÉ, the national broadcaster.
The Wikimedia Foundation also began addressing the PHP vulnerabilities. The nonprofit, which runs Wikipedia, said it had shut down some systems as a precaution while its teams worked through the issue.
Such interruptions can be disruptive, but taking a service offline for maintenance may reduce the chance that an unpatched system is exposed publicly during a high-risk period. For organizations operating online stores, booking tools, customer accounts or payment-related services, the practical concern is that vulnerable software can place customer data and business operations at risk.
With PHP behind such a vast share of the web, the exposure could reach almost everywhere people spend money online.
Nigel Green, chief executive of financial advisory firm deVere Group, said services ranging from marketplaces and ticketing platforms to delivery apps and utility portals could have payment information on systems built with similar code.
AI Accelerates Discovery of Long-Hidden Bugs
The vulnerabilities were uncovered by teams from OpenAI, Google-owned cybersecurity company Wiz, and cybersecurity company Calif. Researchers found the issues in late August, but public disclosure was held until Wednesday, after a fix had been prepared.
Wiz described the episode as an “AI inflection point,” saying artificial intelligence helped researchers identify weaknesses that had been embedded in PHP’s codebase for more than a decade. Its researchers said the technology changed both the speed of analysis and the ability to turn suspected weaknesses into a functioning exploit.
What AI changed was the ability to understand the weaknesses and turn them into a working exploit.
Wiz characterized PHP as a backbone of the web and said that frontier AI systems, combined with appropriate tools, allowed one researcher to complete work in a week that might previously have required a leading team for months. The research process included Google’s Gemini 4 Argon, Wiz Atlas and OpenAI’s GPT-5.6 Sol.
The development highlights a difficult balance for cybersecurity: AI can help defenders locate and repair obscure problems more rapidly, while the same ability to analyze code and develop exploits can increase the urgency of patching once a flaw becomes known. The decision to coordinate disclosure until updates were available was intended to give operators a path to reduce exposure before technical details became public.
Why PHP2Shell matters
PHP originally meant Personal Home Page and has evolved into a foundational tool for building dynamic websites. Its long history and widespread use mean that a vulnerability can have effects far beyond a single company, software vendor or country.
Cloudflare, which worked with the PHP Foundation, Calif, OpenAI and Wiz on the response, said the flaws could enable attackers to run code remotely, interrupt services and expose customer information. The scale of PHP deployment means system administrators must consider not only their main public website, but also older applications, internal dashboards, customer portals and third-party services that may rely on PHP.
Wiz researchers compared the seriousness of the situation with Heartbleed, the 2014 security bug that affected an encryption technology used across a large share of the internet. That comparison underscores why organizations chose precautionary outages even when their most critical public services remained available.
For everyday users, temporary maintenance pages or unavailable features may be frustrating, yet they can indicate that an organization is actively reducing risk. People using online services should remain alert for suspicious password-reset messages, unexpected login prompts or fake support notices that attempt to exploit public concern around a major security event.
For website operators, the immediate priority is to identify PHP-dependent systems, apply the official patch, verify that the update has been deployed across all relevant environments, and restore services only after required security checks are complete. The PHP2Shell response demonstrates how deeply shared software infrastructure connects public institutions, private companies and the daily online services used around the world.
Related Reading
Frequently Asked Questions
What is Websites shut down globally after AI finds?Websites shut down globally after AI finds is the main topic of this guide. The article explains the context, practical details, and next steps readers should understand.
Why does Websites shut down globally after AI finds matter?Websites shut down globally after AI finds matters because readers are looking for a useful answer, not just a short summary. Good content should match search intent and help them decide what to do next.