Organisations and businesses globally are racing to update their computer systems after critical cyber-security flaws were discovered in PHP, a widely-used programming language. The vulnerabilities, found by researchers, could expose millions of websites to potential hacks if not patched, prompting a worldwide scramble to secure systems.

The UK government was among those to take some services offline as a precautionary measure. Downing Street confirmed on Thursday that "some limited government services" were temporarily unavailable while security updates and mitigations were applied. Tech minister Baroness Lloyd of Effra stated that 32 government services were unavailable and four were partially unavailable, attributing this to the precautionary measures.

While the government did not specify which services were affected, it emphasized that no large, public-facing critical services had been impacted. A spokesperson indicated that work had already begun across government to identify and fix potential exposures, with experts collaborating with OpenAI and international partners. They stressed that these outages were not due to successful hacks but were part of ongoing efforts to resolve potential issues.

Olly Whitehouse, chief technology officer at the National Cyber Security Centre (NCSC), described the event as "unprecedented" and predicted it would be "universally felt." He noted that there were no current indications of successful breaches by hackers and that the NCSC was receiving positive confirmation that its advice was being acted upon.

However, cybersecurity lecturer Rory Hopcraft urged the government to ensure its own infrastructure was up-to-date, stating that "The government are the ones who set the rules for other organisations... they just need to effectively be practising what they're preaching at this point." The implications of this flaw could be far-reaching, with experts suggesting that any impact from potential breaches might take months to become fully apparent.

For some businesses, the impact has been immediate. Dean Presley, who runs a garage in Chepstow, South Wales, reported being unable to properly process MOTs online since Wednesday morning. While MOTs can still be conducted, the necessary paperwork and certificates cannot be printed or recorded digitally, forcing him to revert to paper documents and causing delays for customers.

PHP, which stands for PHP: Hypertext Preprocessor, is a server-side scripting language used for web development. Its widespread adoption means that vulnerabilities in the language can affect a vast number of websites and online services. The current situation highlights the ongoing challenge of maintaining robust cybersecurity in an increasingly interconnected digital world.

While no successful attacks have been reported to date, the potential for exploitation remains a significant concern. The ongoing efforts to patch and update systems underscore the critical importance of rapid response and collaboration between developers, cybersecurity agencies, and businesses to mitigate such widespread risks.