AI Helps Uncover Severe PHP Flaw Used by Up to 70% of Websites

what happened

According to The Wall Street Journal, the developers of PHP, a language behind as many as 70% of websites, reported on Wednesday a security vulnerability that could let attackers steal data or infect visitors to a compromised site. AI tools helped uncover what the paper calls one of the most severe online bugs ever found, and specialists are rushing to close it before criminals start using similar tools.

Patches arrived on Wednesday, and many site operators took their sites offline rather than risk a breach. The imageboard 4chan disabled comments, webmasters for the Dutch and Belgian governments pulled their sites, and the US National Security Agency and FBI issued warnings demanding immediate patching across federal agencies.

The worry extends beyond the bug itself. Hackers already claim to exploit it with AI, and technical details leaked before fixes were available. Amazon, which runs part of the internet's infrastructure, said it first saw signs of exploitation on October 17, four days before the patches were released.

why it matters

For markets, the episode shows how quickly software risks can hit hosting, cloud services and cybersecurity companies. Demand for updates and protective tools tends to rise after incidents like this, while firms running exposed servers may face downtime and remediation costs. The Wall Street Journal notes that its explainer may be updated as the situation develops.

market impact

Cybersecurity and cloud hosting: stronger demand for protection, while exposed websites face downtime and remediation costs

tags

instruments