Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it's unlikely to be the last major software scare.

Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began. As security teams and web admins scrambled this week ...

A cybersecurity researcher explains how a flaw in widespread software makes millions of websites vulnerable to hackers – and ...

Hackers could exploit weaknesses in a widely used programming language for websites, online platforms and other technology services to steal users' information and cause other problems, cybersecurity ...

OpenAI says one of its AI models helped identify security vulnerabilities in PHP, a programming language used by about 70% of websites and apps, a report says. Supreme Court hands GOP a major election ...

Two critical vulnerabilities, collectively known as “PHP2Shell,” could allow hackers to remotely execute malicious code on affected servers. Governments worldwide have issued urgent security warnings, ...

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

Cybersecurity researchers using an OpenAI model discovered two critical flaws in PHP, a widely used programming language. This has prompted advisories for web providers to update systems or take them ...

The company added that the findings signal a new phase in cybersecurity, where frontier AI models can help detect flaws. OpenAI’s artificial intelligence models have helped researchers identify ...

Editor's note: This blog was updated on Oct. 23, 2026 at 3:20 p.m. PDT, with additional guidance from Mandiant Consulting on monitoring, patching, and remediation. We have previously updated the blog ...

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...