In brief
A machine learning system discovered an overlooked vulnerability in the PHP web‑programming language that threatens the security of millions of sites ranging from wikis to e‑commerce portals. The flaw has been dubbed the “most severe” ever identified by industry experts. Developers released emergency patches within hours, while security groups assess potential exploitation. The incident underscores the growing role of AI in uncovering hidden threats and the need for rapid response frameworks. Stakeholders now face the challenge of ensuring that the vulnerability is fully addressed before malicious actors can exploit it.
A large‑scale flaw in the PHP programming language – the engine that powers more than 70 % of the world’s websites – was uncovered by an artificial‑intelligence system built by OpenAI. The discovery was announced on the BBC website and has been described by the cyber‑security firm Wiz as the most severe vulnerability ever detected.
PHP is a server‑side scripting language that runs on almost every major website, from Wikipedia and online stores to financial portals. The flaw, identified through automated code analysis, could allow attackers to inject malicious code, steal data or take full control of affected servers.
Once the vulnerability was flagged, the PHP development team issued emergency patches in under a day, a rush that underscores the critical nature of the issue. The updates addressed long‑standing bugs that had remained in the software for years.
Government agencies worldwide and other security groups are now reviewing systems for signs of exploitation. Cyber‑security watchdogs warn that the window of opportunity for attackers could be narrow, but it is too early to say whether the flaw has already been abused.
The incident highlights how AI tools can uncover hidden risks that are otherwise difficult to find, and it points to a future where human oversight and automated scanning will work hand‑in‑hand to protect the internet’s infrastructure.
