AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
- On October 21, 2026, the PHP Foundation released emergency patches for two critical vulnerabilities , each rated 9.2 on the CVSS severity scale, affecting the programming language powering roughly 70% of websites.
- Researchers using OpenAI's GPT-5.6 Sol model discovered these long-hidden flaws in August, fundamentally transforming vulnerability research by enabling identification of deep-seated issues that previously required months of manual effort.
- The NSA and European Union Computer Emergency Response Team urged immediate patching or offline measures, while Cloudflare reported early exploitation attempts as attackers scanned for vulnerable servers.
- Government websites in the Netherlands, Finland, and Canada were temporarily taken offline as a precautionary measure on October 21 to protect sensitive infrastructure while administrators applied emergency security updates.
- Cybersecurity experts warn this episode marks an "AI inflection point," as researchers expect similar AI-assisted discoveries to increase sharply in coming months, requiring organizations to prioritize rapid patching.
1103 Articles
1103 Articles
That Critical PHP Security Flaw Affecting 70% of All Websites You (and We) Should Be Worried About
A newly discovered critical vulnerability in the PHP programming language threatens seventy percent of global websites. Cybersecurity researchers utilized artificial intelligence tools to uncover the huge flaw. Governments and organizations immediately took vulnerable web pages offline to prevent hacker exploitation. Developers published emergency patches, exposing systemic risks within foundational open source digital infrastructure and volunte…
Governments and companies around the world are rushing to patch their websites — or temporarily disconnect them until they can be solved — after the discovery of major security bugs in PHP, a software that supports much of the internet. OpenAI, whose artificial intelligence models were used to find the bugs, stated in a blog post that it was "one of the most important security issues of recent times" given the widespread use of PHP.
Majority of Websites on Internet Left Vulnerable After Critical Security Flaws Are Discovered
Cybersecurity experts are warning that millions of websites are in urgent need of a security patch, after critical flaws were discovered in PHP, the programming language that powers a majority of sites on the internet. The flaw was discovered Tuesday by researchers at the firm Calif using AI tools. It can allow unauthenticated attackers to take control of web servers and to steal sensitive data including passwords. Prominent websites around the …
Massive A.I. hack reported. What to know… – The Horn News
The language that’s known as the backbone of the internet is now subject to what experts describe as one of the most notable vulnerabilities in recent memory. PHP is a widely used general-purpose scripting language that is geared towards web development, and thus, it powers the vast majority of websites... Read More The post Massive A.I. hack reported. What to know… appeared first on The Horn News - Proudly American, Fiercely Independent.
Coverage Details
Bias Distribution
- 44% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
