Farid Farid
Australia’s own cybersecurity agency has been exposed to a critical programming language flaw in a global breach that could be exploited by hackers.
The Australian Signals Directorate, the peak intelligence body intercepting cybersecurity threats, said its website had been among other Australian government sites affected by an issue with software that powers much of the internet.
We are aware of an outage that may be affecting Government websites, including https://t.co/gWWfTByucZ. Organisations and individuals using PHP within their environments should monitor and review PHP official guidance, and apply security patches as they become available.
— Australian Signals Directorate (@ASDGovAu) October 21, 2026
“We are aware of an outage that may be affecting government websites, including https://cyber.gov.au,” the agency said on social media late on Tuesday.
“Organisations and individuals using PHP within their environments should monitor and review PHP official guidance, and apply security patches as they become available.”
The full statement was unable to be accessed when the link was clicked, instead showing an error message.
Several government websites in Europe and Asia went offline as a precaution after a disclosure of two critical vulnerabilities in a widely used programming language sent website operators globally scrambling to protect their systems.
PHP is a programming language used to run websites and powers millions of sites that depend on popular application such as WordPress.
When a visitor loads a page, a server running PHP assembles the content and sends it to the browser.
The flaw in PHP was discovered using an artificial intelligence tool.
Developers of the PHP programming language released urgent new fixes on Wednesday to vulnerabilities that had quietly been lurking in their software for years.
With reports that hackers were exploiting the flaws to break into websites, government agencies in the Netherlands and Finland were among those that took sites offline ahead of the fix as a precaution.
The Dutch prime minister said he was closely monitoring the situation and Japanese Prime Minister Sanae Takaichi also urged website owners to use a new fix.
AAP has contacted the Department of Home Affairs for comment.
More to come
AAP
The Business Briefing newsletter delivers major stories, exclusive coverage and expert opinion. Sign up to get it every weekday morning.