Councils, NHS boards and Met Police pull websites offline after a leaked flaw in software powering much of the internet
Generic imagery of computer hackers. Cloudflare's Dane Knecht warns early attacks are already appearing ahead of today's patch for two PHP flaws each scoring 9.2 on the severity scale.
Details of two critical PHP flaws leaked online a day early, forcing emergency fixes out on Wednesday. The National Cyber Security Centre warned hackers could run their own commands on servers without logging in. Edinburgh, Oxford, Bristol, Lambeth and Barnet council sites were hit, along with 'The Traitors' website. The States of Guernsey also pulled its government and revenue portals.
Finland shut down its government's public web services, and the Dutch cyber agency took its own site offline.
PHP rated each flaw 9.2 out of 10, while security firm watchTowr scored them a perfect 10.