Skip to main content
The Flux Daily
TechUnited Kingdom

AI Uncovers Massive Internet Security Flaw – Global Patching Rush

AI tools exposed a critical long‑hidden flaw in PHP, prompting rapid patches worldwide. A look at what this means for web security and future safeguards.

Source: bbc.co.uk1 min read

In brief

Artificial‑intelligence analysis has uncovered a deep‑root vulnerability in the PHP platform that powers more than 70 % of today’s websites, from Wikipedia to major e‑commerce sites. The flaw, described by the security firm Wiz as the most severe ever seen, is now fixed in the latest PHP release. OpenAI, which helped identify the issue, called it among the most impactful security discoveries in recent memory. Governments and security agencies worldwide are rushing to update services to prevent potential large‑scale exploitation. Experts say the incident highlights both the power and responsibility of AI in safeguarding the digital infrastructure that underpins daily life.

Governments and cyber‑security agencies across the globe are scrambling to contain a massive flaw in internet technology, after AI discovered issues that could be exploited by hackers. The vulnerability, hidden in the PHP platform that powers more than 70% of websites—including Wikipedia and major e‑commerce sites—has now been patched in the latest release.

According to the cyber‑security firm Wiz, the problem is “the most severe” ever detected. OpenAI, whose models assisted in uncovering the flaws, described the discovery as “one of the most impactful security issues in recent memory.” PHP developers rolled out several patches over the past few days to close the window of opportunity for attackers.

So how did an AI “brain” bring this massive risk to light? Analysts say the tool was trained on code repositories and could spot patterns invisible to human reviewers. By scanning millions of lines of PHP code, it flagged a subtle logic error that had existed for years, potentially allowing remote code execution for anyone who could exploit the bug.

The incident underscores the growing role of machine learning in defensive technology and raises questions about the future of code review. While AI can rapidly detect corner‑case bugs, the need for human oversight and rigorous auditing remains paramount, especially on infrastructure that supports billions of daily interactions.

Topics

More on this story