The October 2026 Cyber Emergency: Response & Recommendations

On 21 October 2026 governments in at least six European countries switched off their own websites after details of two critical PHP flaws leaked before the fix was out. The same day Microsoft reported that a China-state aligned group had used AI agents to attack hundreds of organisations through a software supplier.

This report sets out how the incidents unfolded and what the authorities and vendors published in response: the NSA, FBI and CISA, the UK National Cyber Security Centre, CERT-EU, Microsoft and the PHP, Node.js, GitLab and Railway teams. It covers the insurance terms and the legal reporting deadlines that can run alongside an incident in the UK, the EU, Singapore, Australia and the United States.

Written for business owners and executives without technical training, it attributes every recommendation to its issuer, prints the official advisory addresses as plain text, and sets the incidents in the context of AI-driven attack and defence. Position at 22 October 2026.