Government and corporate websites temporarily went offline worldwide after researchers uncovered critical software vulnerabilities that could affect an estimated 70% of the internet, according to CNN.
The flaws, collectively called PHP2Shell, could allow attackers to remotely execute code, disrupt services and access sensitive information, including passwords. Researchers from OpenAI, Google-owned cybersecurity firm Wiz and Calif identified the weaknesses with assistance from advanced artificial intelligence tools.
The PHP Foundation has released a security patch and urged website operators to update their systems immediately. The US National Security Agency also advised organisations to install the update or temporarily take affected systems offline.
Researchers compared the potential significance of PHP2Shell to Heartbleed, a major security vulnerability disclosed in 2014.
Related Tweet:
Exclusive: AI just found one of the most severe online bugs ever. It puts up to 70% of the world’s websites at risk. https://t.co/e8i1kW0SvR
— The Wall Street Journal (@WSJ) October 21, 2026
Also Read:

