Story perspectives

Canada Finds No Compromise After PHP Vulnerability Exploits

By Drooid · Oct 22, 2026, 10:25 PM UTC · How we work

Summary

Story summary

The Canadian government says no evidence of compromise after the global PHP coding vulnerability.
Officials learned of the PHP flaw on Oct. 21, which affects software powering roughly 70 percent of websites.
Security updates are being applied while several Government of Canada sites, including Statistics Canada, were temporarily offline.
Cloudflare reported millions of exploit attempts within hours of the vulnerability’s public announcement.

1 of 1

Story summary

The Canadian government says no evidence of compromise after the global PHP coding vulnerability.
Officials learned of the PHP flaw on Oct. 21, which affects software powering roughly 70 percent of websites.
Security updates are being applied while several Government of Canada sites, including Statistics Canada, were temporarily offline.
Cloudflare reported millions of exploit attempts within hours of the vulnerability’s public announcement.