Global Websites Temporarily Blocked Over Critical PHP Vulnerability

Key summary

Multiple websites worldwide were temporarily blocked after reports of a critical vulnerability in PHP, a language powering nearly 70% of global sites including WordPress, Joomla, Drupal, Slack, and Wikipedia. The flaw allows remote server compromise without login. Governments in Belgium, the Netherlands, Finland, France, Germany, and others ordered temporary closures to implement fixes. A patch addressing two critical points was released by PHP late on October 21. UK authorities urged organizations to audit and update PHP systems immediately or shut them down if updates are impossible. Professor Alan Woodward of the University of Surrey warned that poorly maintained sites remain vulnerable, potentially leading to further cyberattacks for weeks or months. In Thailand, officials expressed concern over government websites hosting gambling spam and noted the new vulnerability is far more severe. Vice Prime Minister and Minister of Higher Education Dr. Yochanan Wongswat ordered agencies under the Ministry of Higher Education to urgently inspect and upgrade PHP systems, prioritizing data protection for patients and students at hospitals and universities. He advised against panic but emphasized the urgency for institutions managing sensitive data.