Dozens of government websites, including those belonging to ministries, provinces, and municipalities, remain vulnerable because they continue to run on outdated versions of PHP web development software. This conclusion emerged from a simulation conducted by BNR with the assistance of Assetnote, a tool capable of detecting PHP-related vulnerabilities.