Science & Tech · Cybersecurity · 2 hrs ago
AI Discovers Critical Security Flaw Underpinning Websites
AI discovered a critical security flaw that underpins websites.
The flaw is described as underpinning websites, but no further technical details are given.
The disclosure has heightened cybersecurity concerns about AI.
The concern is that AI could upend cybersecurity if its shortcomings are not addressed.
The source does not say who made the discovery or identify the affected websites.
It gives no details about fixes or what happens next.
Two critical vulnerabilities in PHP, a programming language used by as much as 70 percent of websites, were disclosed after being discovered with AI tools.
Websites including those of Finland’s health agency, the Port of Rotterdam and Paris police went offline as organizations addressed the flaws.
OpenAI said the vulnerabilities had existed for more than a decade and that PHP’s maintainers led the fixes and release.
The Atlantic reported that hackers had been detected trying to exploit the vulnerabilities.
OpenAI said it worked with maintainers, researchers and security providers to prepare protections before disclosure.
- Who
- PHP’s maintainers led the response, with researchers and security providers including OpenAI and Wiz contributing.
- What
- Two critical vulnerabilities in PHP were discovered and disclosed, prompting fixes and a security response.
- When
- The vulnerabilities were officially disclosed on October 21, 2026.
- Where
- The flaws affect PHP, which is used to run websites and web applications worldwide.
- Why
- AI tools helped identify the vulnerabilities; organizations took systems offline to address the security risk.
This story does not have two clearly opposing sides.
OpenAI said it led a coalition of maintainers, researchers and security providers responding to critical PHP vulnerabilities.
The vulnerabilities were officially disclosed, and PHP’s maintainers released fixes.
The Atlantic reported that some government, hospital and school websites in Europe had gone offline while addressing the vulnerabilities.
- Language
- PHP
- Websites using PHP
- As much as 70 percent
- Vulnerabilities
- Two
- Discovery
- Calif identified a critical flaw using GPT-5.6 Sol; Wiz independently discovered and reported both vulnerabilities
- Fixes
- PHP’s maintainers led the fixes and release
- OpenAI commitment
- $1 billion in subsidized Daybreak access for frontline defenders
5 sources
The AI-Hacking Apocalypse Began Last Night
Government websites go dark after AI-discovered flaw sparks security scramble
A.I. Discovered a Critical Security Flaw Underpinning Websites
NSA warns on ‘critical’ cyber vulnerabilities detected using AI
Patch the Planet: global response coordination as agents uncover critical vulnerabilities
What people are saying
PHP is one of the fundamental pieces of technology that supports the internet