authorities reported no cyberattacks resulting from new PHP security vulnerabilities as of Thursday morning, October 22, 2026. spokesperson Patrick Maierhofer noted that while no breaches occurred, attack attempts are expected.
Website operators worldwide took sites offline Wednesday to install PHP security updates. This follows the October launch of the Federal Office for Cybersecurity (BCS) and the NISG 2026, which legally mandates cybersecurity for specific Austrian companies.
The BCS coordinates national strategy alongside CSIRTs like GovCERT and CERT.at. While the police and C4 handle criminal offenses, the BCS manages security vulnerabilities and NISG compliance to protect critical infrastructure and endangered systems.