PHP Vulnerability: AI Accelerates Global Patch Rush

A deep security hole in PHP, the code that runs roughly 70% of the internet, has triggered a global scramble to patch servers before hackers can take advantage of it.

Wiz Research, in collaboration with OpenAI, disclosed the weakness on Wednesday. The firm stated that the bug had existed for decades but was previously too complex for human researchers to exploit efficiently. AI models have now bridged that gap, turning a theoretical risk into an active threat. OpenAI labeled the discovery one of the most impactful vulnerabilities in recent memory. Wiz Research added that successful attacks could allow intruders to control servers, steal data, and alter site content.

The volume of attack attempts has surged since the announcement. Matthew Prince, head of Cloudflare, reported seeing tens of thousands of exploit attempts in the first 45 minutes. By Thursday, those numbers had climbed into the millions. The speed of this exploitation has forced governments and organizations to react quickly to secure their digital infrastructure.

National security bodies have issued urgent guidance. The U.S. National Security Agency advised organizations to maintain heightened awareness. The U.K.'s National Cyber Security Center called for immediate updates to the latest patched version. China's Industry Ministry requested a review of security gaps. In Japan, Prime Minister Sanae Takaichi issued an urgent request for action, suggesting that temporarily suspending websites could effectively reduce risk if patching is difficult.

Many government services have already gone offline. Dozens of British and Finnish services were taken down this week. Local government sites in France were also briefly removed from the internet. These actions reflect the severity of the threat as administrators work to apply fixes to their systems.

The incident marks a shift in how AI is used in cybersecurity. While previous concerns focused on autonomous agents behaving unexpectedly, this event shows AI helping to identify and resolve critical flaws. Wiz Research noted that the AI models substantially reduced the barrier to exploitation, confirming the role of these tools in modern software security.