AI Uncovers Old Flaws, Sending Websites Offline Worldwide
Friday, October 23, 2026180 words3 minutes259 reads
Researchers used AI to uncover two serious security flaws in PHP, according to the report. PHP runs on web servers and helps create pages for visitors. Many websites, including those built with WordPress, depend on it.
The researchers said the flaws had remained hidden for years. Under certain conditions, attackers could use them to control affected servers and steal sensitive data. This risk does not mean every website has been hacked. Some organisations temporarily took services offline as a precaution.
Emergency fixes, called patches, were released. Security agencies urged operators to apply them quickly and consider taking websites offline if protection could not be added promptly. Updating WordPress or its plugins alone does not repair PHP itself. Owners whose websites are managed by others should ask their hosting company or developer whether the PHP fixes have been applied.
Most visitors need no immediate action. However, they should follow security advice from affected services and watch for phishing messages. These try to trick people into sharing information. AI can help defenders find weaknesses, but it can also help attackers exploit them.
