TECH · URGENT
A Hidden Bug Could Break 70% of Websites
A critical bug in PHP, the code behind most websites, forced emergency patches and some shutdowns.
Transcript of the video edition
A bug in PHP could let hackers take over a website. PHP runs about seventy percent of the internet. Here’s what happened.
Two serious flaws were found in PHP. Attackers can run their own code on a site that hasn’t been patched.
The fix is an emergency update. Some sites went offline on purpose until they could install it. Experts say the danger is in the days before people patch. If you run a website, check with your host today. If you use a site, keep your browser updated, and watch for warnings from the site.
Website owners: update PHP now. Everyone else: keep an eye on the site you use most. Then check back for updates.
Sources
- Axios, Oct 22, 2026: ‘Black October’ PHP vulnerability coverage
- Fortune, Oct 21, 2026: AI tools discovered the PHP vulnerability
- Wiz and Palo Alto Networks Unit 42 threat briefs on CVE-2026-109618 and CVE-2026-109619
- Some sites and agencies took pages offline as precautions; these were not government censorship. Dates vary slightly across reports.
This video edition was scripted with automated tools from the sources listed, narrated by a synthetic voice and published by Daniel Varrone. Corrections: editor@monochromechronicles.com