Overview
- Websites run by Oxfordshire County Council, Oxford City Council and Swindon Borough Council were taken offline as a precaution and were restored after operators applied the issued PHP fix and temporary mitigations.
- Cyber agencies including the UK National Cyber Security Centre and the US National Security Agency urged organisations to update to the fixed PHP release or to take public-facing systems offline if they could not patch immediately.
- The flaw could give attackers direct access to a server’s file system or database, which is why many bodies moved services to simple holding pages, temporary sites or phone channels for urgent tasks such as payments and safeguarding.
- Private firms and platform operators including Wiz, Cloudflare and the Wikimedia Foundation helped assess and roll out fixes, with some reports saying the vulnerability was found using AI and described as unusually severe by at least one firm.
- Authorities and hosting teams are continuing scans and monitoring to verify full remediation across the web, a vital step because roughly 70% of sites use PHP and residual exposure could allow later exploitation.