AI Uncovers Old Flaws, Sending Websites Offline Worldwide
Friday, October 23, 2026204 words3 minutes259 reads
AI-assisted research has exposed two longstanding vulnerabilities in PHP, prompting an international security response, according to the report. PHP runs on web servers and supports many websites, including WordPress-based platforms. The flaws concern the underlying language rather than merely an individual website plugin.
Researchers at Wiz and Calif reported that, under suitable conditions, attackers could exploit the weaknesses to take control of affected servers and steal sensitive data. Some organisations temporarily suspended services as a precaution. Such shutdowns do not establish that those services were successfully compromised, and the reported risk should not be confused with confirmed data theft.
Emergency patches were released, while security agencies urged operators to update promptly or consider temporary shutdowns when protection could not be applied quickly. Updating WordPress or its plugins alone cannot resolve flaws in PHP itself. Owners using managed services should ask their hosting provider or developer whether the PHP fixes have been installed.
The discovery illustrates AI's dual role in security: it can expose bugs that have escaped detection for years, but also accelerate attackers' development of offensive tools. Most ordinary users need no immediate action, although they should follow advice from affected services and remain alert to phishing messages exploiting publicity around the incident.
