Back to AI News
The Verge AI

AI model helped identify critical PHP vulnerability affecting much of the web

Two critical vulnerabilities in PHP, a language used by a large share of websites, led to temporary shutdowns of sites including DeviantArt, 4Chan and the Internet Archive. The flaw reportedly exists in PHP versions spanning roughly 20 years, including unsupported releases. Security firm Wiz described it as among the most severe vulnerabilities discovered in software history. One item in the coverage states that GPT-5.6 Sol was used to identify the critical PHP flaw.

AI Brief

It shows a concrete, large-scale security incident where a frontier AI model reportedly contributed to vulnerability discovery, which matters to anyone running or securing web infrastructure.

Cybersecurity illustration by Carlo Cadenas.

Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger.

By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.

But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.

Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”

Be the first to rate this article.

Comments & Questions (0)

Captcha
Please be respectful — let's keep the conversation friendly.

No comments yet

Be the first to comment!