Topic Lifecycle: Dormant
This topic is currently dormant in the news cycle. It was last covered on Friday 23 October 2026 and has not appeared in recent broadcasts.
Coverage trend (last 30 days)
How much coverage this topic got from each channel over the past month.
On screen
Stills are sampled automatically at 60-second intervals. Where shown, the still is the nearest available frame from the relevant broadcast segment and is included to show what was on screen during that part of the broadcast. A still may not correspond to the exact second of a quoted phrase.
Recent stories
The latest story timelines linked to this topic, newest activity first.
What was reported
A plain summary of this topic, built from the channels that covered it.
Coverage on BBC News and Sky News reported that a critical flaw in the PHP programming language had forced many websites offline and prompted organisations worldwide to patch systems. BBC News described it as one of the most serious cyber security incidents of recent years and said dozens of UK government services had been affected, with similar issues reported internationally and 50,000 British businesses sent official notices to take action. Sky News reported that dozens of websites were still offline that morning and that organisations were scrambling to patch PHP. It quoted Cloudflare's chief executive as saying attackers were making millions of attempted exploits across its network every minute and trying to take over unprotected servers. BBC News interviewed Troy Hunt of Have I Been Pwned, who said exploitation details had leaked early, that guidance to turn services off until patching was unusual, and that he had not yet seen evidence of successful attacks. He also said AI helped researchers accelerate their work rather than discover the flaw on its own, and that the vulnerability had existed for years but exploiting it required high sophistication.
Key Claims by Channel
Wednesday 21 October 2026
| Claim |  |  |  |  |  |  |
|---|---|---|---|---|---|---|
| Widely reported · 5 or more of 6 channels | ||||||
| The PHP vulnerability was reportedly discovered using AI by Wiz and independently by OpenAI. | Reported by Channel 5 | Not reported by BBC One | Reported by Channel 4 | Reported by ITV | ||
| Reported by a few · 2–4 channels | ||||||
| Finnish and Dutch government agencies reportedly took websites down. | Not reported by Channel 5 | Not reported by BBC One | Not reported by Channel 4 | |||
| PHP is reportedly built into up to about 70% of the world's web pages. | Not reported by Channel 5 | Not reported by BBC News | Reported by Channel 4 | Reported by ITV | ||
| PHP developers issued updates to fix critical vulnerabilities in the PHP web server programming language. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Reported by Sky News | |
| The UK National Cyber Security Centre and other cybersecurity agencies advised organisations to patch the vulnerability or consider taking sites down as a precaution if they could not do so quickly. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Reported by Sky News | |
| Cloudflare's CEO said attempted exploitation rose from thousands in the 10 hours before the public announcement to tens of thousands within 45 minutes, hundreds of thousands within two hours, and millions by the time of his post. | Reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Only on one channel | ||||||
| The takedowns were not caused by a hack but by a vulnerability discovered by cybersecurity companies and communicated by national cyber security agencies. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Core UK government websites and the NHS do not run on PHP directly, though some peripheral systems may need the patch. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Without a fix, hackers could potentially exploit the flaws to run malicious code remotely. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Reported by ITV | Not reported by Sky News |
| The flaws had gone undetected for more than a decade and attackers were already trying to exploit them. | Not reported by Channel 5 | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
| Edinburgh Council was among the organisations whose websites were taken offline. | Not reported by Channel 5 | Not reported by BBC News | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
| Attackers used AI to reverse engineer the exploit and target unpatched websites. | Not reported by Channel 5 | Not reported by BBC News | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
| Outages affected UK government services and parts of Amazon and Wikipedia. | Reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
Thursday 22 October 2026
| Claim | | | | | | |
|---|---|---|---|---|---|---|
| Reported by a few · 2–4 channels | ||||||
| PHP is reportedly built into up to about 70% of the world's web pages. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Reported by ITV | Reported by Sky News | |
| The PHP vulnerability was reportedly discovered using AI by Wiz and independently by OpenAI. | Not reported by BBC News | Reported by BBC One | Not reported by ITV | Reported by Sky News | ||
| Governments in Finland, France and Australia and Edinburgh Council were among public bodies that took websites offline. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Reported by ITV | Not reported by Sky News |
| Attackers could exploit unpatched PHP sites, including by running commands or using their own AI tools. | Not reported by Channel 5 | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
| A hacker video circulated online with guidance on exploiting PHP. | Not reported by Channel 5 | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
| Serious vulnerabilities were reported in PHP, a programming language used by many websites. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Websites and pages were taken offline as a precaution while organisations patched the vulnerabilities, with outages reported in several countries including the UK and some BBC pages; the outages were not caused by a cyber attack. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Cloudflare's CEO said attempted exploitation rose from thousands in the 10 hours before the public announcement to tens of thousands within 45 minutes, hundreds of thousands within two hours, and millions by the time of his post. | Not reported by BBC News | Not reported by BBC One | Not reported by ITV | Reported by Sky News | ||
| Only on one channel | ||||||
| The UK National Cyber Security Centre and other cybersecurity agencies advised organisations to patch the vulnerability or consider taking sites down as a precaution if they could not do so quickly. | Not reported by Channel 5 | Reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Core UK government websites and the NHS were reported not to rely on PHP. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Many apps from the Pokémon Company could not be accessed. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Reported by ITV | Not reported by Sky News |
| UK and US cyber authorities warned about the potential impact of the PHP vulnerabilities. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| If the vulnerabilities were not fixed, attackers could run commands on servers and potentially access sensitive data such as medical records. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Warnings said AI was already helping hackers exploit online vulnerabilities faster than before, and Amazon Web Services warned it would sharply reduce the time before vulnerabilities are exploited. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| NetBlocks director Alp Toker warned that legacy and neglected systems could lead to a wider wave of attacks and a prolonged series of attacks over months and years. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Outages affected UK government services and parts of Amazon and Wikipedia. | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News | |
Friday 23 October 2026
| Claim | | | | | | |
|---|---|---|---|---|---|---|
| Widely reported · 5 or more of 6 channels | ||||||
| The UK government reported that 32 government services were unavailable or temporarily offline, with four partially unavailable, amid a global cyber security issue. | Reported by Channel 5 | Reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Reported by ITV | Reported by Sky News |
| Reported by a few · 2–4 channels | ||||||
| Cloudflare's CEO said attempted exploitation rose from thousands in the 10 hours before the public announcement to tens of thousands within 45 minutes, hundreds of thousands within two hours, and millions by the time of his post. | Not reported by Channel 5 | Reported by BBC News | Not reported by BBC One | Reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| The National Cyber Security Council sent 50,000 warnings to UK companies. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Reported by ITV | Not reported by Sky News |
| MOT services were temporarily unavailable and had to use paper records or certificates. | Reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Reported by ITV | Not reported by Sky News |
| A critical flaw in a programming language, reported to be PHP, forced many websites offline and prompted organisations worldwide to patch their systems. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Millions of attempted exploits were reported, with Cloudflare saying attackers made millions of attempts per minute and tried to take over unprotected servers. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Only on one channel | ||||||
| The PHP vulnerability was reportedly discovered using AI by Wiz and independently by OpenAI. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Reported by Sky News |
| Downing Street said no large public-facing critical services were being affected. | Not reported by Channel 5 | Reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| A mechanic in South Wales was affected by a website outage. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| The defence secretary warned the public and businesses to prepare for coping with large-scale emergencies. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Details of the PHP vulnerability leaked before many organisations had time to apply the fix. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| There was no confirmed compromise of central government systems at the time. | Not reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| No breach of budget security was reported. | Reported by Channel 5 | Not reported by BBC News | Not reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Troy Hunt said exploitation details had leaked early and that guidance to turn services off until patched was rare. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Troy Hunt said he had not yet seen evidence of successful attacks against services, though such evidence could emerge later or only become apparent after a data breach. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Troy Hunt said AI helped security researchers accelerate their work rather than discover the vulnerability on its own. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| Troy Hunt said the vulnerability had existed for years but exploiting it required high sophistication, with AI helping to work out how to exploit it. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
| BBC News described the incident as among the most serious cyber security incidents in recent years. | Not reported by Channel 5 | Not reported by BBC News | Reported by BBC One | Not reported by Channel 4 | Not reported by ITV | Not reported by Sky News |
This is a cross-channel consensus summary, not an objective account. Consensus can be uniformly wrong, or omit what only one channel covered.
Timeline
Where this topic appeared. Cells show coverage time and are darker when there was more coverage.
| Date | Channel 5 | BBC News | BBC One | BBC Two | Channel 4 | GB News | ITV | Sky News |
|---|---|---|---|---|---|---|---|---|
| Friday 23 October 2026 | — | 4m 15s 4.8% | — | — | — | — | — | 3m 16s 3.3% |
| Thursday 22 October 2026 | 2m 27s 6.6% | 23m 37s 20.5% | 16m 25s 10.0% | — | 11m 45s 24.6% | 13m 20s 21.6% | 12m 37s 14.4% | 25m 21s 27.5% |
| Wednesday 21 October 2026 | — | 3m 24s 3.0% | 1m 55s 1.9% | — | — | — | 1m 53s 1.6% | 9m 50s 9.4% |
| Tuesday 13 October 2026 | — | — | — | — | — | — | 1m 40s 2.2% | — |