AI Found Two Critical Flaws in PHP, Forcing Governments to Take Websites Offline, per BBC

AI just found the internet's soft spot

Two critical security flaws in PHP, the programming language behind much of the internet, are forcing governments to take websites offline, per the BBC.

The flaws were found by AI. Security firm Wiz called them the "most severe vulnerabilities ever discovered" by the technology. PHP powers a huge share of the world's websites and web applications, including government services, which is why the response has been so drastic: in some cases, taking systems offline entirely while patches are applied.

A milestone for AI-driven security research

Vulnerability hunting has historically been slow, manual work. An AI system surfacing flaws this severe in one of the internet's most scrutinized codebases marks a step change, and it cuts both ways. Defenders can now scan legacy code at machine speed, but attackers get the same capability, and the window between discovery and exploitation keeps shrinking.

For governments and enterprises running PHP infrastructure, the immediate task is patching and auditing. The longer-term question is how much of the internet's aging foundation gets re-examined now that AI can do the examining.

Do you want to see how to make more plays? Do you want to find gains yourself? Unusual Whales helps you find market opportunities through our market tide, historical options flow, GEX, and much, much more. Create a free account here to start conquering the market with Unusual Whales

Options market and stocks to watch

Every major vulnerability disclosure is a demand signal for cybersecurity spending. Watch CrowdStrike, Palo Alto Networks, Cloudflare, and Google's Wiz parent Alphabet, whose security arm made the discovery. Emergency patching cycles and government security directives tend to surface in vendor commentary within a quarter or two, and you can follow developments on the Unusual Whales news feed.

Want more market intelligence? Create your free Unusual Whales account for options flow, market tide, GEX, and the full toolkit.