Canadian Centre for Cyber Security said vulnerabilities affecting PHP, a website scripting language

See more Toronto Sun on Google — save as a Preferred Source
The Canadian government temporarily shut down some of its websites as a precautionary measure this week after being advised its software was at risk of cyber threats.
Minister of Artificial Intelligence and Digital Innovation Evan Solomon said the decision was taken following guidance from the Canadian Centre for Cyber Security.
“This is in response to a vulnerability identified in PHP, software used by websites around the world,” the MP for Toronto Centre said on social media Wednesday. “This is a global issue, and other governments and organizations are also taking protective measures.”
Subscribe now to read the latest news in your city and across Canada.
- Unlimited online access to articles from across Canada with one account.
- Get exclusive access to the Toronto Sun ePaper, an electronic replica of the print edition that you can share, download and comment on.
- Enjoy insights and behind-the-scenes analysis from our award-winning journalists.
- Support local journalists and the next generation of journalists.
- Daily puzzles including the New York Times Crossword.
Subscribe now to read the latest news in your city and across Canada.
- Unlimited online access to articles from across Canada with one account.
- Get exclusive access to the Toronto Sun ePaper, an electronic replica of the print edition that you can share, download and comment on.
- Enjoy insights and behind-the-scenes analysis from our award-winning journalists.
- Support local journalists and the next generation of journalists.
- Daily puzzles including the New York Times Crossword.
Create an account or sign in to continue with your reading experience.
- Access articles from across Canada with one account.
- Share your thoughts and join the conversation in the comments.
- Enjoy additional articles per month.
- Get email updates from your favourite authors.
Create an account or sign in to continue with your reading experience.
- Access articles from across Canada with one account
- Share your thoughts and join the conversation in the comments
- Enjoy additional articles per month
- Get email updates from your favourite authors
Some Government of Canada websites have been temporarily taken offline as a precaution to protect government systems and Canadians' information, following guidance from the Canadian Centre for Cyber Security.— Evan Solomon (@EvanLSolomon) October 21, 2026This is in response to a vulnerability identified in PHP, software…
Solomon said the government is taking this situation “extremely seriously” and that tech teams are working on patches before restoring the affected websites.
However, he did not identify which websites were offline or how long they would be out of service.
Critical vulnerabilities affecting PHP
The cyber security agency said in an alert to IT professionals and managers that it was aware of critical vulnerabilities affecting multiple versions of PHP, a website scripting language.
The agency said a “successful exploitation could allow an unauthenticated threat actor to execute arbitrary code on an affected system” and that internet-facing PHP servers and applications are at heightened risk. Security updates were released to address the vulnerabilities.
RECOMMENDED VIDEO
“Organizations should identify affected systems and apply the appropriate updates immediately,” the government agency said, adding there is no active exploitation that has been identified but that could change quickly.
Solomon advised organizations using PHP to apply the latest security updates as soon as possible and to follow the Canadian Centre for Cyber Security for the latest updates.
Join the Conversation
This website uses cookies to personalize your content (including ads), and allows us to analyze our traffic. Read more about cookies here. By continuing to use our site, you agree to our Terms of Use and Privacy Policy.







