LIBYA · CYBERSECURITY
Key Facts
- —What is happening Libya’s Tripoli government ordered an immediate, temporary shutdown of all government websites, systems and databases built on the PHP programming language, in a circular that surfaced late on Thursday 22 October 2026.
- —Why it matters Libya is an oil producing country, so any cyber weakness in its state systems draws outside attention, yet nothing published so far links the order to oil, the National Oil Corporation or the central bank.
- —The numbers Two critical PHP flaws are involved, and the PHP project released four patched versions on Wednesday 21 October 2026, but the report on the circular gives no deadline and no restart date.
- —Who is who The Government of National Unity is the Tripoli based administration led by Prime Minister Abdulhamid Dbeibah, and the order comes from that government alone, so its reach beyond Tripoli is not known.
- —What to watch Whether Libyan officials publish the circular, say which sites went dark, and confirm when patched systems return, and whether other Libyan authorities take similar steps.
- —What it means for you US readers who depend on Libyan government websites for permits, customs or business filings may face delays, and nothing yet shows any effect on oil exports or on US companies.
Libya’s Tripoli government has ordered its PHP websites and databases shut. The order followed a global warning about two critical flaws.
Libya’s Tripoli government has ordered government websites offline, plus the systems and databases behind them. The step follows a worldwide warning about two critical flaws in the PHP programming language.
The order was reported by Libya Observer, a Libyan news site, on Thursday 22 October 2026 at 23:13. Oil, National Oil Corporation and central bank systems are not mentioned in that report, so their status is unknown.
What the Government Websites Offline Order Says
Minister of State for Prime Minister and Cabinet Affairs Mohammed Omar bin Ghalboun issued an urgent circular, Libya Observer says. It went to the authorities responsible for cybersecurity and information technology.
The circular demands an “immediate, temporary shutdown” of all government systems, websites and databases running on PHP. Affected systems are also to be cut off from public networks as a precaution.
Emergency cybersecurity teams are on high alert to install security updates once they are officially available. The circular says the responsible authorities carry full responsibility for preventing serious damage to the country’s digital infrastructure.
Why a Software Flaw Forces Sites Offline
The PHP project published a critical security release on Wednesday 21 October 2026, covering versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Its notice says the two flaws allow an unauthenticated attacker to run code on a server from a distance.
The PHP project says updating is the only complete fix and lists only partial workarounds for sites that cannot update. Older versions no longer get official updates, though limited backports exist for 7.4, 8.0 and 8.1.
The US National Security Agency urged organisations on Wednesday to take websites offline if they could not fix the flaws immediately. It said such flaws often give attackers a direct path to a server’s files or database.
Governments in Europe acted the same day, including the Netherlands, Finland and France, according to Cyprus Mail. The Libyan order therefore fits a pattern of precaution, and no Libyan break in has been reported.
In Plain English
A programming language is the set of instructions that makes a website work, and PHP is one of the most common. A flaw in it can let a stranger take control of a server before any password is asked.
Libya’s Government of National Unity, or GNU, is the Tripoli administration led by Prime Minister Abdulhamid Dbeibah. The National Oil Corporation is the state oil company, and the Central Bank of Libya manages the state’s money.
A Divided Government, and Where Oil Fits
The order comes from the Tripoli based GNU, so it is not known whether it reaches agencies run by other Libyan authorities. The House of Representatives, the parliament, acts separately from the GNU, and no similar order from any other authority was found.
The circular, as Libya Observer describes it, covers systems that run on PHP and does not name any ministry, company or sector. It says nothing about oil production, export terminals, the National Oil Corporation or the Central Bank of Libya.
Libya Observer ran separate reports this week on a leadership dispute at the central bank. Nothing in those headlines connects that dispute to the PHP order.
What It Means for US Readers
The warning behind the order came from a US agency, and the same flaws affect American websites. The US cyber agency CISA told organisations to update, saying it had seen no exploitation when it published, The Standard reports.
Amazon’s security chief, CJ Moses, said the flaws were now broadly exploited, Cyprus Mail reports, though Amazon could not say attempts worked. US firms that deal with Libyan agencies could see delays, though no source names any American company.
What Is Not Known
Only Libya Observer has been found reporting the circular, and its date, number and wording are unconfirmed. The Libya Herald and Libya Review front pages showed no matching report on Saturday 24 October.
It is not known which websites went offline, how many agencies complied, or whether any Libyan system was attacked. No source says whether oil, National Oil Corporation or central bank systems run on PHP or fall under the order.
The report says the shutdown is temporary but gives no deadline. Libya Observer describes memory access by attackers, while the PHP project’s notice speaks of remote code execution.
What Comes Next
The next step is the installation of the patched PHP versions on Libyan government servers, after which sites could return. The circular sets no date, so the pace depends on each agency’s technical staff.
A published copy of the circular, or a statement from the Prime Minister’s office, would settle which systems are covered. Until then, the order should be read as a precaution, not as proof of an attack.
Frequently Asked Questions
What did Libya order?
Libya’s Tripoli government ordered an immediate, temporary shutdown of government websites, systems and databases running on PHP. Affected systems are to be isolated from public networks.
Why did Libya take government websites offline?
The order follows warnings about two critical flaws in PHP, which the US National Security Agency said could give attackers direct access. Patched versions were released on Wednesday 21 October 2026.
Are Libya’s oil or central bank systems affected?
That is not known. The report on the circular does not mention oil, the National Oil Corporation or the Central Bank of Libya.
Does the order cover all of Libya?
That is not known. It comes from the Tripoli based Government of National Unity, and no similar order from another authority was found.
When will the websites come back?
No date has been given. Systems are to return once officially released security updates are installed.
Sources: Libya Observer, 22 October 2026; PHP project security announcements, 21 and 23 October 2026; Khaleej Times, 21 October 2026; Cyprus Mail, 21 October 2026; The Standard, Hong Kong, 22 October 2026; Libya Herald; Libya Review (all accessed 24 October 2026).
This article was produced by The Rio Times’ automated newsroom system. How we use AI · Report an error · Editorial responsibility: Matthias Camenzind, Editor-in-Chief
Part of our ongoing coverage
Africa: The New Scramble — the great-power contest over the continent.