The PHP Foundation issued emergency security updates on Wednesday, October 21, after researchers discovered two critical remote-code-execution vulnerabilities that could expose websites worldwide to attacks.
Security researchers at Calif and Wiz reportedly used artificial intelligence models to identify the flaws in August. PHP supports roughly 75% of identified websites, including platforms built with WordPress, Drupal and Magento.
The European Union Computer Emergency Response Team and the US National Security Agency warned organizations to take precautions, including isolating internet-facing applications. Government websites in the Netherlands and Finland temporarily went offline as a precaution.
OpenAI President Greg Brockman warned that AI-driven vulnerability discovery could accelerate, raising concerns about attackers exploiting systems before administrators install available patches.
Related Tweet:
Some websites go dark as operators address an AI-detected flaw in a web programming language https://t.co/sz2avKpkz0
— O.C. Register (@ocregister) October 21, 2026
Also Read:
TIPP Staff
