In brief
Artificial intelligence researchers recently identified a severe flaw in PHP, the programming language behind more than seventy percent of internet sites. The bug, hidden for years, could allow attackers to compromise sites ranging from encyclopedias to e‑commerce platforms. Cyber‑security firms and governments worldwide are rolling out patches and tightening safeguards. The discovery highlights how AI can act as a powerful defender in the evolving cyber‑security landscape.
Artificial‑intelligence systems have flagged a critical flaw in PHP, the scripting language that powers more than 70 percent of the world’s websites, from encyclopedic wikis to major e‑commerce sites.
The bug, which remained buried for years, exposes websites to a range of attacks, including data theft, unauthorized access and service disruption. As soon as the issue was confirmed, PHP developers rushed to release patches that address the code‑path exploited by the flaw.
"This is the most severe vulnerability we’ve ever detected," said cyber‑security firm Wiz. OpenAI, whose models were used in the detection, called the event “one of the most impactful security issues in recent memory.”
Governments and security agencies are now in a race to update their systems and mitigate damage before malicious actors can exploit the weakness. The incident underscores a growing trend in which AI tools act as first‑line defenders, hunting vulnerabilities that human teams may miss.
For more details on the technical nature of the PHP flaw and how to protect your infrastructure, follow the links below.




