How an OpenAI model exposed a flaw in 70% of the internet's websites
Governments and organizations around the world began scrambling on Oct. 21, 2026, to fix a vulnerability in software that runs their websites, a bug that could give hackers access to data and control of websites. The flaw in PHP, the programming language that powers much of today’s web, prompted urgent warnings from the U.S. National Security Agency, cybersecurity agencies and software vendors.
TL;DR
- A vulnerability in the PHP programming language, used by about 70% of websites, was discovered using an AI model.
- The flaw allows hackers to gain shell access, giving them control over websites and access to data.
- Hackers have already begun attempting to exploit the vulnerability.
- Organizations running PHP-based systems must update their software immediately.
- AI is proving to be a double-edged sword in cybersecurity, aiding both discovery and exploitation of flaws.