What happened
PHP developers released urgent fixes on Wednesday for critical vulnerabilities that had lurked in the widely used programming language for years until AI uncovered them, urging all users to update immediately.
Why it matters
Some hackers were already exploiting the flaws, according to tech firms, so any operator running unpatched PHP faces active risk until the update is applied.
WHO IT HITSWeb developers and IT teams running PHP-based sites are the ones who must apply the fixes right away, since tech firms warn some hackers are already exploiting the flaws.
Summaries like this, in your inbox every morning.
The disclosure landed with immediate operational consequences. Government agencies across Europe were among those that took sites offline as a precaution, a sign that the flaws were serious enough that operators chose downtime over exposure.
The timing sharpens the stakes: tech firms warned that some hackers were already exploiting the flaws, so the window between disclosure and patching is not theoretical. PHP's developers paired the fixes with a blunt instruction — all users were encouraged to update immediately.
What makes this case notable is how the flaws surfaced. They had quietly been lurking in the software for years until they were uncovered using AI, a reminder that long-dormant bugs can be found and weaponized faster than routine maintenance cycles assume.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
France, Denmark, Finland, and the Netherlands took government websites offline Wednesday after developers used…
Elon Litman showed that a loss term built from (2^30 + u) − 2^30 reads 0.0 in float32 while PyTorch's autograd…
The NSA warned that two critical PHP vulnerabilities, present since version 5 in 2004, affect roughly 70% of w…
Hugging Face CEO publicly criticized Netflix's AI hack documentary, saying it gets the story wrong
CrowdStrike Counter Adversary Operations uncovered four previously unreported threat actors weaponizing AI age…
Palo Alto Networks said AI Runtime Security on NVIDIA BlueField DPUs is now generally available across AI fact…
