A minister told the House of Lords that 32 central government services were unavailable and four partly unavailable, mostly as a precaution while PHP was patched, with no confirmed compromise. Councils including Edinburgh, Oxford, Bristol, Lambeth and Barnet and some police services were also reported offline. The NCSC sent about 50,000 warnings to organizations.
What to do: Services returning as PHP is patched; no confirmed central government compromise.
AI angle: The government said the NCSC was briefed by OpenAI a week before public disclosure.
There's a decent chance the internet ceases to exist as such, at least for a time.
Why this score
A national government's online services (impact 3), driven by mass exploitation attempts (exploitability 3), government as the primary target (criticality 2).