Government websites go dark after AI-discovered flaw sparks security scramble
EU cyber officials urged immediate patching as the flaws carry a 9.2 severity rating and could enable unauthenticated remote code execution.
- On Wednesday, Oct 21, 2026, PHP developers released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, rated 9.2 on the CVSS severity scale and allowing unauthenticated remote code execution.
- Researchers at security firm Calif and Alphabet-owned Wiz identified the flaws using OpenAI's GPT-5.6 Sol model; the vulnerabilities have persisted for decades, but proving exploitability required steps at the edge of human research capabilities.
- Government and public services across the Netherlands and Finland implemented precautionary shutdowns Wednesday to protect systems until administrators could apply security updates, with state IT provider Valtori beginning restrictions at 12:45 pm local time.
- Cloudflare CTO Dane Knecht reported early attacks emerging, prompting the National Security Agency and CERT-EU to advise organizations to isolate internet-facing applications if immediate patching is not possible.
- Circulating reports describe an exploit tool dubbed 'PHP2Shell,' highlighting how AI-driven discovery accelerates the vulnerability research lifecycle and intensifies the race between defenders and attackers to patch before mass exploitation.
491 Articles
491 Articles
Madrid, Oct 21 (EFE).- Several countries have already launched alerts to the vulnerabilities that were detected in a programming language (the PHP) widely used to create web pages and applications and that can carry important risks for those servers. Among the countries that have already launched these alerts are the United States, Spain, Germany, the Netherlands, Germany, Germany [...] The entry Global Alert to the vulnerabilities that put the …
Government websites in Europe, elsewhere go dark after AI-discovered flaw sparks security scramble - The Tribune
Government websites in Europe and elsewhere went offline on Wednesday after the disclosure of critical vulnerabilities in a widely used programming language sent website operators around the world scrambling to protect their systems. Developers of the PHP programming language on Wednesday released urgent new fixes to vulnerabilities that had quietly been lurking in their software […]
Coverage Details
Bias Distribution
- 40% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
