AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
Researchers used AI to uncover two critical PHP flaws that can enable remote code execution, prompting emergency fixes and shutdowns across thousands of websites.
- On October 21, 2026, the PHP Foundation released emergency patches for two critical vulnerabilities , each rated 9.2 on the CVSS severity scale, affecting the programming language powering roughly 70% of websites.
- Researchers using OpenAI's GPT-5.6 Sol model discovered these long-hidden flaws in August, fundamentally transforming vulnerability research by enabling identification of deep-seated issues that previously required months of manual effort.
- The NSA and European Union Computer Emergency Response Team urged immediate patching or offline measures, while Cloudflare reported early exploitation attempts as attackers scanned for vulnerable servers.
- Government websites in the Netherlands, Finland, and Canada were temporarily taken offline as a precautionary measure on October 21 to protect sensitive infrastructure while administrators applied emergency security updates.
- Cybersecurity experts warn this episode marks an "AI inflection point," as researchers expect similar AI-assisted discoveries to increase sharply in coming months, requiring organizations to prioritize rapid patching.
1117 Articles
1117 Articles
What to know about AI-detected Internet security bug
The language that’s known as the backbone of the Internet is now subject to what experts describe as one of the most notable vulnerabilities in recent memory. PHP is a widely used general-purpose scripting language that is geared toward web development, and thus, it powers the majority of websites around the world. When the organisation behind the language and the Federal Bureau of Investigations’ cyber division warned Wednesday of significant v…
The headlines didn't exactly capture the attention of the news outlets when it was reported that researchers had discovered two security vulnerabilities in PHP, the programming language used to build websites and applications, prompting calls for companies to install a security update to address them. The United States announced it was examining government systems and accelerating measures to mitigate the risks, but the media paid little attenti…
That Critical PHP Security Flaw Affecting 70% of All Websites You (and We) Should Be Worried About
A newly discovered critical vulnerability in the PHP programming language threatens seventy percent of global websites. Cybersecurity researchers utilized artificial intelligence tools to uncover the huge flaw. Governments and organizations immediately took vulnerable web pages offline to prevent hacker exploitation. Developers published emergency patches, exposing systemic risks within foundational open source digital infrastructure and volunte…
Governments and companies around the world are rushing to patch their websites — or temporarily disconnect them until they can be solved — after the discovery of major security bugs in PHP, a software that supports much of the internet. OpenAI, whose artificial intelligence models were used to find the bugs, stated in a blog post that it was "one of the most important security issues of recent times" given the widespread use of PHP.
Coverage Details
Bias Distribution
- 44% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
