AI-assisted search finds critical flaws in PHP, used by about 70% of websites
Two critical flaws were found in PHP, a programming language AP says is vital to 70% of websites globally, through AI-assisted discovery; OpenAI says it led a coalition that worked on them over the past two months, and CNN reports teams at OpenAI, Wiz and Calif uncovered them. The PHP Foundation released fixes late Wednesday. The FBI recommended taking websites offline if they can't be updated immediately, and some government websites in Europe and other services went offline while operators patched.
The day's 5 biggest stories, verified, free by email
▶ Watch the 90-second briefing (story 1 of 5) 🔔 Get 6 AM & 5 PM alerts
Why it matters
Anyone who runs a website built on PHP, including sites using WordPress or Drupal, needs to install the PHP Foundation's fixes. The flaws could let attackers run code remotely without a password, and some public services were taken offline while they were patched.
Sources
- AP via Philadelphia Inquirer: Rush is on to patch a vulnerability that could impact 70% of websites
- CNN via ABC7 New York: Websites shut down globally after AI finds flaw
Also in this edition
Get the catch-up in your inbox
The same fact-checked briefing, sources included, at 6 AM and 5 PM Central. No spin, no spam — unsubscribe anytime.
We only use your email to send the briefing.