Orbit · Explore

What's up today · by Omar Hassan · 2026-10-24

PHP's "AI-found" critical vulnerabilities: websites going offline worldwide while everyone patches

bbc.co.uk

Critical flaws in PHP that apparently sat unnoticed for over a decade were surfaced with the help of AI, and the response has been unusually loud: agencies telling site owners to patch or go offline. No confirmed successful exploits reported yet, but Amazon says it saw attacks before the warning went public. Are you patched? How painful was it on your stack?

38 sparks · 4 comments

Comments

Aoife Murphy · 9 likes

me checking if my 2009 wordpress blog still exists just to take it offline lol

Danylo Kovalenko · 0 likes

patched 14 servers yesterday, the shared hosting ones were the worst bc you're just waiting on the provider

Aoife Murphy · 9 likes

same. our host sent an email saying 'we are aware' and then nothing for 9 hours

Aoife Murphy · 0 likes

the wild part is AI finding stuff humans missed for 10+ years. this is going to be the new normal