AI Discovery Exposes Critical PHP Flaws, Triggers Global Emergency Patching

Overview

• PHP maintainers released emergency fixes after technical details leaked online, and the PHP Foundation urged all users to update immediately following the public disclosure on Wednesday, October 21.
• Security agencies including the U.S. NSA issued urgent advisories that organizations should apply patches or take vulnerable systems offline because the bugs can give unauthenticated access to server files and databases.
• Governments, courts, major platforms and many companies temporarily disabled public services to install updates, with municipal portals and national systems among those taken offline as a precaution.
• Defenders reported active scanning and exploitation attempts before and after disclosure, with firms such as Amazon detecting attacks against test environments and security teams tracking large-scale probe activity.
• Researchers say advanced AI tools accelerated both the discovery of the decade-old flaws and the speed at which exploits can be developed, prompting calls for faster patching, supply‑chain checks, and tighter IT governance.