AI helps uncover decade-old critical PHP flaws putting ~70% of the web at risk
Graham_dePenros · x · 2026-10-22
Two critical bugs hidden for over a decade were found in PHP, which powers roughly 70% of websites, allowing server takeover and data theft.
- Details leaked ahead of coordinated disclosure; exploit demos spread online, Cloudflare reported early attacks, Dutch government sites went offline preemptively, and agencies urged immediate patching
- AI played a major role: researchers used OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon to find the flaws and build working exploits far faster than traditional methods
- Emergency fixes are out, but sites must install them
- The bigger concern: as AI improves, finding and exploiting complex vulnerabilities gets faster for researchers and hackers alike
More from Safety
- OpenAI proposes six amendments to California's SB 53, covering RSI, shutdown controls, audits — ShakeelHashim · 2026-10-22
- Google Explains robots.txt Rules for AI Crawlers, Emojis, International URLs — OnlineInference · 2026-10-22
- Should Every Agent Get Its Own Identity and Short-Lived Scoped Credentials? — iamjessew · 2026-10-22
- How do you verify the model you downloaded is what you think it is? — iamjessew · 2026-10-22
- Veracode report: AI now writes half of committed code but only 56% pass security checks — WeldPond · 2026-10-22
- Researcher Warns AI Cyberattacks on Grid Possible Within a Year, Shares Prep List — cephaloform · 2026-10-22