AI Uncovers Critical PHP Flaws Threatening Millions

The NSA has issued an urgent warning after OpenAI and Google's Wiz used AI tools to discover two critical security vulnerabilities hidden in PHP since version 5, released in 2004. PHP powers roughly 70% of websites, or over 33 million sites. The flaws allow attackers to access server file systems and databases. Patches are available, and the recommendation is to update to PHP 8.5.12. If immediate patching is impossible, the NSA advises taking sites offline. Researchers found the flaws before hackers did, but public disclosure means the race to patch millions of sites is now on.