AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
- On Wednesday, October 21, organizations worldwide scrambled to address two critical PHP vulnerabilities dubbed PHP2Shell after premature online disclosure forced the PHP Foundation to release security updates ahead of schedule.
- Researchers at Wiz and Calif independently identified the flaws using advanced AI tools in August, coordinating with the PHP Foundation to address code issues persisting for more than a decade.
- The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, could allow attackers to remotely execute code or access sensitive server memory, potentially impacting roughly 70% of websites worldwide.
- Several services, including Japan's Finance Ministry and the Wikimedia Foundation, went offline Wednesday as a precaution, while cybersecurity agencies CERT-EU and CERT-In advised immediate patching of vulnerable systems.
- Sophos Counter Threat Unit's Don Smith warned that "threat actors move fast, especially with the help of AI," noting legacy appliances often act as a 'black box' difficult to patch or replace.
854 Articles
854 Articles
Applications, government pages and various institutions on the internet using PHP programming language had to be removed while waiting for an update to correct critical vulnerabilities. The United States and the European Union have already issued warnings
Researchers using GPT-5.6 Sol have discovered the critical vulnerability of PHP2Shell, which can allow hackers to gain control of web servers.
There are two holes in the PHP, the language in which websites are programmed. Two vulnerabilities that could be exploited by any hackers to enter the servers, steal sensitive data or destroy portals and that would affect 70% of sites around the world. They have been discovered thanks to advanced artificial intelligence, [...] The article Cyber-world alarm: "A hole in the PHP code puts 70% of the Internet at risk" comes from Il Fatto Quotidiano.
Government sites in Europe and elsewhere in the world were offline on Wednesday, after revealing critical vulnerabilities in a widely used programming language, discovered with artificial intelligence (AI), led site operators around the world to rush to protect their systems, Reuters reports.
Coverage Details
Bias Distribution
- 42% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
