- If exploited, the bugs could allow attackers to steal sensitive information, like your passwords and data, or take control of vulnerable servers.
Driving the news: A potential attack exploiting vulnerabilities in PHP emerged Wednesday, prompting governments and businesses to temporarily take their websites offline while security patches are installed.
- Dozens of websites in the US, UK and around the world were briefly taken offline to resolve the issue.
- This disruption put the National Security Agency and the European Cybersecurity Agency on alert.
State of play: Security patches were released to address the issues on October 21, 2026. Cybersecurity companies have urged anyone using PHP to install the security updates immediately.
What they say: OpenAI’s technology helped detect the bugs, and the company called the discovery “one of the most significant security issues in recent memory.”
- “To our knowledge, Frontier AI discovered these vulnerabilities before the attackers,” OpenAI said.
- Cybersecurity company Wiz wrote in a blog post: “These findings are among the most serious vulnerabilities discovered in PHP, and arguably in software history. »
Learn more below.
What is PHP?
You probably never heard of PHP, even if you’ve been interacting with it for decades.
- PHP, which stands for Hypertext Preprocessor, is a programming language used by about 70% of websites with a known server-side language.
- It has been around since the 1990s to help build websites, taking data and generating content sent to a browser.
- It is still used today for a variety of websites, including Wikipedia, WordPress blogs, and commercial websites.
How it works: HTML determines what a website displays. PHP works behind the scenes to collect information and generate content.
What exactly was the PHP vulnerability?
AI researchers discovered two critical PHP vulnerabilities that could have allowed an attacker to take control of a website’s server without having legitimate access.
- Hackers could exploit these flaws, dubbed “php2shell” by cybersecurity companies, to steal information from these websites.
Between the lines: The flaws went undetected for more than a decade because exploiting them required complex technical work that AI helped researchers uncover, according to Wiz.
Why cybersecurity incidents are so important
thought bubble via Bradley Olson of Axios: The PHP vulnerabilities are so serious that the NSA has warned website operators to shut down their sites if they don’t have enough time to fix the bug.
- But the cybersecurity problems of recent days have extended far beyond that and include disruptions on developer platforms, data leaks on public schools, break-ins at public companies and much more.
- A major scoop from Axios also revealed that banks are detecting unauthorized access by third-party agents to customer accounts, a problem they are working to contain.
Cyber professionals are calling the series of attacks a “Black October” due to their volume and level of risk, even though many organizations have so far mitigated the risk and avoided massive real-world damage.
- While advocates and AI companies have been warning for months that a season of cyber emergencies was coming, they are also working to secure some of the obscure software that still underpins much of the modern internet ecosystem.
The bottom line: As attacks continue, experts have urged users to secure their passwords, use a password manager and avoid panic.
- As with any cyber emergency, the true barometer of damage is the extent to which the damage seeps into the real world, as was the case with ransomware that took a hospital’s software offline or a pipeline system that briefly disrupted fuel supplies on the East Coast.
Gn bussni
