ISS Global / Investigation Report
PHP security alert: widespread website shutdowns
Precautionary service suspensions reported on 21 October 2026
- Issued
- Location
- Netherlands and international organisations using PHP-based services
- Incident date
- 21 October 2026; preceding warning on 20 October
- Language
- English
- Document
- English edition · 10 pages · PDF · 0.6 MB
An English-language investigation of precautionary website shutdowns following critical PHP security warnings. It distinguishes service unavailability, exposure to a vulnerability and confirmed intrusion, without treating every offline website as evidence of a cyberattack.
Original report cover · Open PDF ↗Scope & reporting context
Reporting window: 21 October 2026, 00:00–23:59 Europe/London; the 20 October warning provides context and research was retrieved on 22 October. Covers reconstruction, technical cause, warning and patch chronology, confirmed service impacts, evidence and attribution audit, restoration assurance and ten linked primary sources. No private system logs or forensic exhibits were examined. The Dutch edition remains available separately in the archive.
The complete PDF contains the report’s source register, assessments and limitations. Read those alongside any individual finding.