Norfolk councils take websites offline over global security flaw

Summarised from 2 outlets · Updated 22 Oct, 08:32 · Archive

Norfolk councils have taken their websites offline after a critical security flaw in PHP programming language was discovered.

Norwich City Council took its website offline on Wednesday evening after a critical security flaw was discovered in PHP, the programming language that powers roughly 70 per cent of websites worldwide, including those built on WordPress. Researchers using advanced AI tools found the flaws in August. West Norfolk Council also pulled its site down on Wednesday but had brought it back online by Thursday.

The PHP Foundation had planned to reveal the problem later in August alongside a fix, but details leaked on social media on Tuesday, forcing the organisation to issue emergency updates the following day. Security experts warn the weaknesses could allow criminals to seize control of websites remotely and access the databases behind them, potentially leading to theft of personal data. The National Cyber Security Centre, an arm of GCHQ, urged organisations to patch immediately.

West Norfolk Council announced its precautionary move on Facebook, saying: "We've taken this step as a precaution to help keep our systems safe." Multiple public bodies, universities and government organisations worldwide have also taken their websites offline. In the UK, councils in Edinburgh, Oxford and Bristol went dark, as did at least seven Scottish councils and six health boards.

How it is being reported

• Norfolk council websites shut down as global security flaw sparks hacker fearsNorwich City Council has taken its website offline after a critical security flaw found by AI left millions of sites worldwide open to hackers.Eastern Daily Press · 22 Oct, 08:05
• Norfolk council websites shut down as global security flaw sparks hacker fearsNorwich City Council has taken its website offline after a critical security flaw found by AI left millions of sites worldwide open to hackers.Norwich Evening News · 22 Oct, 08:05

In this story: Norwich City Council · West Norfolk Council · PHP Foundation · National Cyber Security Centre · GCHQ · Norfolk

This summary was written by AI from the headlines and standfirsts above, and states as fact only what at least two outlets report. How we use AI · Report a problem