UK government services offline after critical PHP security flaw discovered

Unbiased summary

Cybersecurity researchers identified a critical vulnerability in the PHP programming language, used by nearly 70% of websites. The UK's National Cyber Security Centre warned organisations on Wednesday. In response, 32 UK government services went offline and four were partially unavailable as a precaution. The Office for Budget Responsibility's website was taken down but restored; officials confirmed the Budget was not compromised. Downing Street stated no large public-facing critical services were affected and that services were not hacked. The government worked with OpenAI and international partners. A patch was released, but details were reportedly leaked, prompting warnings of potential exploitation.

Generated with deepseek-flash (DeepSeek)

Coverage by outlet

The Independent centre-left

Angle Centrist, fact-focused reporting that emphasizes government reassurances while noting the scale of the issue.

Bias The Independent sticks closely to official statements and factual details, avoiding alarmist language. It does not downplay the incident but frames it within the government's reassurance that no critical systems were affected. The coverage is relatively neutral, with no obvious political slant.

UK government services offline after global PHP cybersecurity threat

‘Limited’ Government services temporarily offline amid PHP cybersecurity issue

City AM centre-right

Angle Business-oriented angle highlighting corporate and governmental scrambling, with a focus on the role of AI in both discovering and exploiting vulnerabilities.

Bias City AM emphasizes the involvement of major companies like Amazon and the use of AI tools (GPT-5.6 Sol, Gemini 4 Argon) in detecting flaws. It lists specific government bodies affected, which other outlets omit, and stresses the proactive government response. The framing leans towards the business impact and technological aspects, but remains largely factual.

PHP cyber threat rocks internet as government and companies scramble to fend off attacks

Daily Mail right

Angle Sensationalist, consumer-focused explainer that dramatizes the threat and its potential impact on personal data.

Bias The Daily Mail uses alarming language such as 'fatal vulnerabilities' and 'worldwide website emergency,' and emphasizes risks to private data. It includes expert quotes warning of a 'wave of hacking attempts' and provides a detailed explainer of PHP. This coverage deviates from neutral by heightening fear and focusing on individual consequences rather than the measured government response.

Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for you

GB News right

Angle Straightforward news report with a slight emphasis on government statements and the precautionary nature of the shutdowns.

Bias GB News closely mirrors official statements, noting the number of services offline and the OBR website takedown. It includes reassurances that no critical services were affected and that the Budget was secure. The coverage is largely neutral but leans slightly towards downplaying the severity by repeatedly stressing the precautionary measures and lack of hacking.

UK Government websites taken offline amid cyber security threat