Met Police, council and government websites are taken offline as critical flaws put 70% of the internet at risk
Generic imagery of computer hackers. Cloudflare's Dane Knecht warns early attacks are already appearing ahead of today's patch for two PHP flaws each scoring 9.2 on the severity scale.
Edinburgh, Oxford, Bristol, Lambeth and Barnet council sites were hit, and the online home of 'The Traitors' went down too. Finland has temporarily shut its government's public web services, and the Netherlands' cyber-security agency pulled its own site. The National Cyber Security Centre told organisations that cannot patch to consider going offline. Fixes from the PHP Foundation were due at 3pm BST.
Both PHP flaws are rated 9.2 out of 10 and could let hackers in without logging in.
Wordfence warns that automatic WordPress updates will not install the PHP fix.
Cloudflare's Dane Knecht says early attacks are emerging: 'This is a STOPGAP only.'