AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
Security agencies warned the flaws could let attackers take over servers, and some operators took sites offline until patches were installed.
- On Wednesday, Oct. 21, 2026, the PHP Foundation released emergency security patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, enabling unauthenticated remote code execution on vulnerable servers.
- Security researchers at Calif, working with OpenAI, identified the flaws using advanced AI models; PHP underpins an estimated 70% of websites worldwide, amplifying the risk.
- Rated 9.2 out of 10 on the CVSS severity scale, the vulnerabilities prompted government agencies in Finland and the Netherlands to take public-facing websites offline as a precautionary measure.
- Cloudflare CTO Dane Knecht reported early attacks emerging, while the National Security Agency advised organizations to patch immediately or isolate internet-facing applications if unable to update.
- OpenAI considers this "one of the most impactful vulnerabilities in recent memory," as AI-driven research accelerates discovery cycles and forces permanent changes in foundational software auditing practices.
572 Articles
572 Articles
European government websites go dark after AI-discovered flaw sparks security scramble
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators around the world scrambling to protect their systems.Developers of the PHP programming language on Wednesday released urgent new fixes to vulnerabilities that had quietly been lurking in their software for years until they were uncovered using AI, saying that all users…
Most of the internet is suddenly melting down, and there's only one fix
The internet isn’t safe. That’s the warning going around the world today, as two newly discovered vulnerabilities instantaneously made the majority of websites susceptible to targeted attacks. This isn’t a problem that impacts one site or service. It’s a global phenomenon, and you should be prepared for what happens next.On October 20, the discovery was leaked online of two PHP vulnerabilities, dubbed CVE-2026-109618 and CVE-2026-109619. Togethe…
Researchers from three different companies said on Wednesday that they used artificial intelligence (AI) to discover and correct a series of critical errors that could affect 70% of the internet.
Coverage Details
Bias Distribution
- 40% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
