AI-found PHP flaws send websites offline, from Edinburgh to Doctor Who
Joe Tidy explains how defensive AI research uncovered a decade-old weakness, and why IT teams are now pulling their own sites down.
Why this story? The video opened at a pace of 1,439,510 views a day, 51 times a normal first day on this channel (28,188).
Websites taken down worldwide as AI reveals critical cyber-security threat | BBC News
The secret got out early. Researchers had planned to reveal a set of critical flaws in PHP, the programming language behind a large share of the web, later this month together with a fix. Instead the details leaked on social media, the PHP Foundation rushed out its announcement, and websites around the world started switching themselves off.
In a short report for BBC News at Ten, presented by Jane Hill, cyber correspondent Joe Tidy explains that much of the disruption is deliberate: IT teams are taking sites offline before anyone can break in. Edinburgh Council and the BBC's own Doctor Who site are among his examples, along with organizations in Japan, Belgium and the Netherlands, while outage notices from Bandai Namco and Square Enix appear on screen. The description adds that France and Finland ordered some services shut, and that the US National Security Agency told organizations unable to patch at once to go offline.
The twist is how the flaws were found. Researchers at the firms Calif and Wiz, working in OpenAI's Patch the Planet program, used the most powerful AI models they could get and turned up what Tidy calls "a complex chain of steps at the edge of what human researchers could practically achieve." The weaknesses had gone unnoticed for more than a decade. Now, he says, "the bad guys" know about them too, and are using their own AI against sites that have not applied the fix.
On a channel where a Short's first day is usually counted in the tens of thousands, the report passed half a million views in six hours, and it did so on a day when BBC News as a whole was running below its usual pace. A shorter companion clip on the same story drew only a small fraction of that.
The comments arrived roughly ten times faster than on a typical first day. Viewers trade help-desk jokes, mourn the Doctor Who pages, and many point out that the thumbnail spells websites with an extra i.
Published on Trari
Where next?
What viewers say
Have you tried turning it off and back on again
@davidpownall9364See it on YouTube"This sounds huge, Joe"
"It's bigger than that Jane, it's large."@Pining_for_the_fjordsSee it on YouTubeNot the Dr. Who section of the BBC website?! WHY GOD, WHY?!?!
@_flankySee it on YouTube
6 more comments
Dear BBC, you spelt websites wrong on the thumbnail, it says "webisites" :)
@blazacSee it on YouTubetime for everyone to get offline and go outside and play in the park again lol
@adamrubinson6875See it on YouTubeTomorrow I’m selling my tech stocks and buy paper, pens and carrier pigeon stocks 😂
@bordersw1239See it on YouTubeI knew it was gonna be PHP the moment she said programming language powering the web 😂
@romievthedonSee it on YouTubeLove how she introduces php. Its like explaining to aliens that Oxygen is heavily used by all forms of life on planet earth. Lol
@djangoworldwide7925See it on YouTubeBros, I already got toilet paper.
@QareCODESee it on YouTube
Public comments from the video's page on YouTube
- Channel
- BBC News
- Subscribers
- 20,200,000
- Channel views, last 7 days
- 26,860,193
- Channel views, pace per day
- 2,703,944 (on a normal day: 4,269,795)
- Video published
- October 21, 2026
- Video views so far
- 571,234 (less than a day online)
- Video views, pace per day
- 1,439,510
The numbers
A two-minute studio report moved far faster than this channel's Shorts usually do, and its comment section filled just as quickly.
💡 Test your knowledge
Doctor Who's website was among those taken offline. What is the name of the Doctor's time-traveling ship?
The TARDIS, which looks like a blue police box, has carried the Doctor through time and space since the series began in 1963.



