In brief
Artificial intelligence has finally exposed a decades‑old flaw in the PHP programming language that can allow attackers to hijack web servers without authentication. The discovery triggered an extraordinary global cyber‑security response, with governments, service operators and the NSA warning of immediate patching or shutting down sites. Governments in the UK, Finland, the Netherlands, the US, Japan and Australia have pulled or are disabling affected sites, while the PHP development team urged users to update to the latest patch. The incident highlights both the power and the risk of AI in uncovering software vulnerabilities.
For more than a decade, serious flaws had gone undetected in the software that powers much of the internet. Artificial intelligence has finally exposed them, triggering a worldwide security scramble.
What the Bug Is
The fault lies in PHP (Hypertext Preprocessor), the language behind billions of sites such as WordPress, Wikipedia and countless online shops. It allows unauthenticated attackers to hijack web‑servers and exfiltrate data—potentially affecting millions of websites.
Global Impact
Governments and tech firms in the UK, Finland, the Netherlands, the United States, Japan and Australia have pulled or are temporarily disabling sites. The University of Geneva’s portal went offline, as did councils in Edinburgh and health boards across Scotland.
Government and Agency Response
The PHP development team released emergency patches on the same day. The US National Security Agency urged all organisations to update now or shut down databases. The UK’s National Cyber Security Centre warned of backdoors and advised checking for them.
How AI Found the Flaw
Security researchers at Wiz and Calypso used advanced AI code‑analysis tools, which scan millions of lines of source code faster than humans. Their findings were leaked, forcing an immediate response.
What Web‑Site Owners and Users Can Do
Update to the latest PHP version, review log files for suspicious activity and heed the NSA’s advisories. Users should monitor for phishing attempts making use of PHP‑related news.
— Osmond Chia, Business reporter
