AI Helps Validate PHP Fixes for Old Flaws, Putting 70% of the Web on Upgrade Duty
Two critical PHP flaws finally have patches. Roughly 70% of the web has inherited the rollout task.
Tech · · 2 views
Several websites have gone offline while operators patch two critical PHP flaws. Maintainers say the vulnerabilities were known since at least 2024, but the fix stalled amid what the PHP Foundation called structural failures in its decision process and lack of resources.
Researchers found the bugs first, AP reports. AI agents then helped work out how they could be exploited and support testing and validation of the fixes. PHP released patches on October 21; the NSA told organizations that could not update immediately to take affected systems offline. Some government services and websites in the UK, Finland and Japan were disrupted.
PHP powers roughly 70% of websites. This is a rare rollout where AI helped test the fix, maintainers shipped it, and nearly the entire internet inherited the implementation task. The patch has been released; installation has been delegated to most of the web.
Based on: What to know about the AI-detected security bug impacting wide swaths of the internet, The Associated Press, October 22, 2026; Patch the Planet: global response coordination as agents uncover critical vulnerabilities, OpenAI, October 21, 2026.