EDITION OF OCTOBER 22, 2026
PHP vulnerabilities: service outages reveal the burden of legacy systems
The Verge reports service outages following the disclosure of vulnerabilities in PHP. The Internet Archive was brought back online after patching, while legacy games are announcing their closure. The available information highlights the difficulty of securing software that is no longer maintained.
Legal disclosure: this content was produced by an artificial intelligence system. Editorial transparency
Outages linked to PHP vulnerabilities show how much the response to an alert depends on the ability to maintain the affected software. This edition also examines AI companies' lobbying spending, Spotify's new verification checks and recently reported details of traffic interception on Tor.
Vulnerabilities in PHP are causing service outages and creating difficulties for legacy platforms, according to coverage published by The Verge. The outlet reports that DeviantArt and 4chan were temporarily taken offline after the vulnerabilities were disclosed. Some Dutch and Finnish government bodies also disconnected their websites as a precaution. These shutdowns alone do not constitute evidence that the services concerned were compromised.
The Internet Archive illustrates the possibility of a rapid recovery: according to The Verge, its operations team applied patches, secured the service and restored operations after a temporary outage. However, the report specifies neither the versions deployed nor the technical measures taken. This case therefore does not establish that restoring service would be as straightforward for every organization affected.
The situation appears more difficult for World Quest and Save My Demonic World. The Verge reports that these Japanese mobile games will shut down, with their developers saying their legacy technology cannot be updated to fix the vulnerability. The problem then extends beyond temporary unavailability: when a service can no longer be patched, its continued operation itself becomes uncertain. This distinction is essential to understanding why the same alert can lead to temporary maintenance or an announced shutdown.
Pressure is also coming from exploitation attempts. According to statements by Cloudflare chief Matthew Prince, relayed by The Verge, their volume on the company's network rose sharply after disclosure. These are observations attributed to Cloudflare, rather than a tally of successful intrusions. The report provides no consolidated count of victims or of any data that may have been stolen.
Finally, The Verge says the vulnerabilities were discovered with AI assistance. The outlet reports Wiz's analysis that exploiting them previously required a particularly complex sequence of steps. This suggests increased pressure on teams responsible for patches, without making it possible here to measure AI's exact role in each attack. The operational issue remains the ability to patch systems and verify the conditions for restoring them to service. For legacy services, that ability also depends on whether their underlying software can still be maintained.