ðŸ‡ðŸ‡° English, 22 October 2026, security flaws
Critical PHP Flaws Exposed by AI, Prompting Global Website Shutdowns
Two severe vulnerabilities in PHP, used by 70% of the world's websites, were discovered by AI models and prompted a global rush to patch.
The flaws, discovered by AI models, allow attackers to take over web servers without needing a password, and were found to be among the most severe vulnerabilities discovered in PHP.
The US National Security Agency told organisations to patch immediately or pull vulnerable systems offline, and many large platforms were able to stay online as they were built on other programming languages or used operators that could install the fix quickly.
PHP programmers released a fix on Wednesday, and the PHP Foundation warned users to update now, as the flaws had been reported privately to developers and kept confidential while a fix was prepared.