{"id":810892,"date":"2026-10-23T00:18:16","date_gmt":"2026-10-23T00:18:16","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/810892\/"},"modified":"2026-10-23T00:18:16","modified_gmt":"2026-10-23T00:18:16","slug":"nhs-scotland-website-remains-offline-after-critical-php-flaw-found","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/810892\/","title":{"rendered":"NHS Scotland website remains offline after critical PHP flaw found"},"content":{"rendered":"

\n The flaws were found within the PHP programming language<\/a>, which powers much of the internet.\n<\/p>\n

\n PHP is used by almost 70% of websites, according to cybersecurity firm Cloudflare, and underpins popular platforms such as WordPress and Magento.\n<\/p>\n

\n READ MORE: Lesley Riddoch: Jackdaw won\u2019t cut our bills \u2013 so why are we still hooked on gas?<\/a>\n<\/p>\n

\n Websites linked to the French, Danish, Finnish and Dutch governments are among those to appear to go offline on Wednesday afternoon in an attempt to protect their systems.\n<\/p>\n

\n NHS Scotland, several NHS boards and at least eight councils<\/a> have also been affected.\n<\/p>\n

\n At the time of writing, the NHS Scotland<\/a> website remains offline, with a message stating that the site is “undergoing scheduled maintenance”.\n<\/p>\n

\n \"NHSA screenshot from the NHS Scotland website (Image: NHS Scotland)\n<\/p>\n

\n Meanwhile, websites linked to the French, Danish, Finnish and Dutch governments are among those which went offline on Wednesday afternoon in an attempt to protect their systems.\n<\/p>\n

\n According to Cloudflare chief executive Matthew Prince, there was a dramatic surge in attempts to exploit the issue once it was announced.\n<\/p>\n

\n He wrote on Twitter\/X: \u201cSome stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it.\n<\/p>\n

\n \u201cThat jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.\u201d\n<\/p>\n

\n The Office for Budget Responsibility (OBR) said it had followed guidance to take its website offline, \u201cin view of the critical security issues affecting PHP\u201d.\n<\/p>\n

\n It is understood some of the UK Government<\/a>\u2019s online services may be temporarily unavailable while steps are taken to maintain security, but any impact is expected to be minimal.\n<\/p>\n

\n Scottish Secretary Douglas Alexander has said the security of next week\u2019s UK Government Budget has not been compromised by the critical security flaw.\n<\/p>\n

\n He was asked whether the issues identified with PHP could result in major Budget leaks because the OBR had to take down its website.\n<\/p>\n

\n Alexander told Times Radio: \u201cNo, I\u2019ve had no indication whatsoever that there\u2019s any problem in terms of a breach of Budget security.\n<\/p>\n

\n \u201cIndeed John Healey, who I was with yesterday in Scotland, as I understand it initiated new security protocols reflecting his experience in the Ministry of Defence when he came to the Treasury as Chancellor in the summer.\u201d\n<\/p>\n

\n READ MORE: Daniel Sloss issues statement addressing Vittorio Angleone ‘rape’ joke<\/a>\n<\/p>\n

\n Last year, the OBR\u2019s Budget analysis was mistakenly published online ahead of then-chancellor\u2019s Rachel Reeves statemen<\/a>t to the Commons<\/a>, allowing for early access to market sensitive information.\n<\/p>\n

\n Organisations have been urged by the National Cyber Security Centre (NCSC) to update to a new, fixed version of the software.\n<\/p>\n

\n If software cannot be immediately upgraded, organisations should consider taking their websites offline, the NCSC said.\n<\/p>\n

\n A UK Government spokesperson said: \u201cWork is already under way across Government to actively identify and patch any potential exposure.\n<\/p>\n

\n \u201cWe encourage all organisations, private and public, large and small, to follow guidance issued by the NCSC to understand their exposure and take the necessary actions to safeguard their systems.\u201d\n<\/p>\n

\n An expert has also warned that the flaw in the PHP programming language was revealed \u201cearlier than it was supposed to have been\u201d, which means hackers started checking websites to see if they could exploit the vulnerability.\n<\/p>\n

\n Speaking to BBC Radio 4\u2019s Today programme, computer science professor Alan Woodward said: \u201cThe cat was let out of the bag rather earlier than it was supposed to have been.\n<\/p>\n

\n \u201cThere was an embargo on this, and there\u2019s always a window between the flaw being publicly known about and it being patched so that the attackers can\u2019t successfully get in.\n<\/p>\n

\n \u201cAnd what happened, unfortunately, the day before the patch was out, somebody let the cat out of the bag.\n<\/p>\n

\n \u201cThere was an initial version of the patch that was released, and so it was very easy to compare the original with the patched version and see which bit of code you needed to go and exploit.\n<\/p>\n

\n \u201cAnd that people like Amazon, Cloudflare, all sorts of companies that monitor what\u2019s going on on the web, saw that this was being probed for.\n<\/p>\n

\n He added: \u201cWe don\u2019t know whether it\u2019s being attacked, but certainly people were probing websites to see have you got that flaw?\u201d\n<\/p>\n

\n NHS Scotland has been contacted for comment.<\/p>\n","protected":false},"excerpt":{"rendered":"The flaws were found within the PHP programming language, which powers much of the internet. PHP is used…\n","protected":false},"author":2,"featured_media":810893,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[102,2960,56,54,55],"class_list":["post-810892","post","type-post","status-publish","format-standard","has-post-thumbnail","category-healthcare","tag-health","tag-healthcare","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/810892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=810892"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/810892\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/810893"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=810892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=810892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=810892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}