In brief
Artificial intelligence identified a serious vulnerability in PHP, the programming language behind over 70% of the internet, prompting a global scramble by governments, security firms and the PHP development team. The flaw, deemed the most severe for years, has already triggered emergency patches and heightened concerns over potential exploits across sites ranging from Wikipedia to e‑commerce giants. Cyber‑security analyst Wiz called it the “most severe” ever while OpenAI hailed the discovery as “one of the most impactful security issues in recent memory.” This breakthrough raises questions about the safety of foundational internet technologies and the need for AI‑driven security oversight.
Artificial intelligence has uncovered a huge flaw in PHP, the language that powers more than 70% of websites on the planet. The discovery has sent governments, security firms and the PHP community into a frantic race to patch the vulnerability, which could be exploited by hackers worldwide.
The PHP Software Foundation released emergency fixes almost immediately after the flaw was reported, halting a wave of potential attacks on platforms from Wikipedia to major online retailers.
Cyber‑security company Wiz described the breach as the “most severe” ever encountered in code, while OpenAI, which played a key role in locating the threat, called the event “one of the most impactful security issues in recent memory.”
The shock has prompted a broader debate about relying on legacy internet infrastructure and the potential for AI to detect such undiscovered risks before they are exploited.
For users, the main takeaway is that any site running an affected version of PHP should update to the latest patch immediately to avoid being prey to future attacks.



