# Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

> **Open Intelligence Dossier** · First detected: 2026-10-22 08:20 UTC · Category: World

## Executive Summary
Global web disruptions follow an AI-detected PHP vulnerability exploited by hackers before patches arrived.

## Intelligence Brief
Recent coverage details a massive cyber incident involving critical security flaws in PHP, a web programming language powering a large portion of the internet. Hackers launched millions of attempts to exploit the cyber flaw, which affects an estimated seventy percent of the internet. The National Security Agency issued an advisory recommending critical patches for the discovered vulnerabilities, prompting a global race to update computer systems and secure digital infrastructure against ongoing digital threats. Media outlets emphasize the unprecedented role of artificial intelligence in uncovering these software flaws. Outlets such as New Scientist and Tech Xplore report that an artificial intelligence system discovered what is described as the most disruptive hack yet, raising widespread fears regarding automated cyber attacks.


Yahoo and CNN coverage highlights that website operators took systems dark to address the AI-detected vulnerability before further damage could occur. POLITICO.eu documents the scale of the exploitation attempts, noting that malicious actors targeted the PHP flaw with millions of rapid attacks while administrators rushed to apply fixes. The context surrounding these events involves the fundamental architecture of modern web infrastructure. PHP serves as a core programming language used to build and operate a significant majority of websites worldwide. Coverage from The Economist questions the ongoing safety of the internet in light of automated discoveries, while Tech Xplore provides background on what PHP is and how its vulnerabilities intersect with emerging artificial intelligence hacking capabilities.


The involvement of the National Security Agency underscores the severity of the threat, elevating a routine software patch to a matter of national and international security concern. As the situation develops, coverage does not yet specify the full long-term impact on global internet traffic or identify the specific actors behind the millions of exploitation attempts. Observers are watching whether further patches will completely secure affected networks or if additional AI-discovered vulnerabilities will emerge in other foundational programming languages. Readers must rely on ongoing updates from official cybersecurity advisories and major news organizations to monitor website restorations and the broader fallout from the PHP security crisis.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| New Scientist | Global race to update computers as AI discovers most disruptive hack yet | [Source Link](https://news.google.com/rss/articles/CBMiugFBVV95cUxOTFFhSDVPMlhVM1ZqbVUwUlBGNFdDY3NXbjQzanVFb3hJeG5MbmFLOUd5M0dRNUtGYVlEVkdIcHFvSkVpeU1mbjktcjV5UGhULVpYMFNyN1ZRQTZEYWJ0cmZNZmphUHN3eGR0dGdUSERTelFpeVFZb19fS2VvZHI5eWdGcW44b09CVUo5NW9NcGs0T0stLUNrRzZHb0RjenkxMnBsQXAxTHJsUHo3OVg1MndhZWpnRFYyZ3c?oc=5) |
| CNN | Websites shut down globally after AI finds a critical flaw affecting 70% of the internet | [Source Link](https://news.google.com/rss/articles/CBMidkFVX3lxTE9VMi1odVpCeldBLWZwZjdGVkE5am16cTZfeHlkbno4SzdGSmg4TVVTcVkxRnF5aUZvbV9DOEVpbGdSa05IX2VocHE5ZEdIa1M4cVoxVVZwX290REZNZFhRNGFRMkQ4ZzRJTC0xWHI0MlI5dDg4WVE?oc=5) |
| POLITICO.eu | Hackers launch ‘millions’ of attempts to exploit global PHP cyber flaw | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxNMHVYU3dKOE1BT0xiTGVUeVlvSl96bXhRdzBicUxRRjZfSEFnT0xuRXVjaVctN29DV1FCZEFVSFkyZ3hGOHhmN002Vll5QndKbXlUbkdqZF9FR09OOVJhNmxOdXpmNUtmXzhVeEFUMFU0elJfbHRlc2VYbTZnelBrQlNyWkpQMlZ6d20yRXg3RmZuOVZaTWRJbUo2cEIyenRwa0Zr?oc=5) |
| National Security Agency (.gov) | NSA Advisory: Critical Patches Recommended for PHP Vulnerabilities | [Source Link](https://news.google.com/rss/articles/CBMi7wFBVV95cUxQdWFCY1c1VktkZXA4MFl3V2NiekVxN2NrckZtYkw5c0NYcnNRT3I5TFlLQ3lMZzNkQVRIVDdwSVZZVG9tNFZ3NUJpN0xONnphbm93QnR2eGYycVdqYUhRMWp5Y2lEVTF1RGhTQ1FhU29RdTBoNi1sZGxjQlRLQng2WkNaU1FFRVRkZ3B4RDlENEF3eUZkeDF0R0Eyb0VFM2JnbHoybjNCYU8xaXdsa0t2WWk0VDdzNVBaZ2VhNDYzcGpiamJVUXJ0OGJSakxhT201VVVhSlc2Qk5fN0hySjNRQlpsQUNDS2FTX1RubkNJOA?oc=5) |
| The Economist | Is the internet still safe? | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxONGZVZGxlSS1EZXJscVZLY1Vqa2JDa29XeVo0dXdfcEYxWnhWSlJpZU5KUDJTZnZ3d1NWaTVMMzdESU5nOWxBdEJvRkptd3FlM1FEb25KdkFsaURCbzhCb0V1OWdxQlhsWGZMNU0zbWNkYjVaTk9pMkdEbGVYZFl6SklwMW1rc3Q0bUx2U1B4RQ?oc=5) |
| Tech Xplore | Websites down: What is PHP and how has it raised AI hacking fears? | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTFB0Vlg1UGVlRzRvMWk3ZHIzSjZPdjFXQXZpb2hpMTE2NzcxX194V01LeWpwaEkxRFh0UUJhRmwybklhQ1VtVEZrcTduVGE5MzBocDhZVGxEV01hdDJ0N0xWSjZtcGdEUnI2TFBMdi1DSXNiUQ?oc=5) |
| Tech Xplore | Some websites go dark as operators address an AI-detected flaw in a web programming language | [Source Link](https://news.google.com/rss/articles/CBMidEFVX3lxTFBUaW9WOXR3a0NrMzk5ZGZZblpWancyQnZkVXNNemxSSXlqVkVFQmdlcDh4eWxyN0xSRlJCRjRtQURfbkZGUUZiMVdYLUlvRDNqUWNxbXl2Smd2MEFLRTR5LWdFSVZqWV96emxqSWF3UC1xVExl?oc=5) |
| Yahoo | AI Helped Uncover Critical Security Flaws in Software That Powers Websites. Here's What We Know | [Source Link](https://news.google.com/rss/articles/CBMijAFBVV95cUxNeGdJcWdURjQ1OXVtRnJmNmJRTmVBbHpKZ1B5aTlMSlh0RTMyYldBYmdnUEJyaUNhZDVGcUljWlVkSVN3VkNCbXpFaFp4c3JWY0k5SHdWSUwtY3RYcjNhVFhUdkRDWHJIa2t6RW1ueWE5RmFzcVpXR1phNy1qeHFsVmwwUzZQVE81d3hLaQ?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-10-22/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched-2*