AI discovery of a security flaw affecting 70% of websites signals major tech risk.
Context
What happened: AI uncovered a security flaw, dubbed PHP2Shell, in PHP, the programming technology behind as much as 70% of the world's websites. Patches were released Wednesday after details leaked on Hacker News.
Key numbers: PHP underpins as much as 70% of websites. The flaw was found in August by Ryan Austin of Calif using OpenAI's GPT-5.6 Sol.
Why it matters: Volker Dusch called it PHP's most serious security problem in more than a decade, comparing it to Heartbleed. Researchers warn AI can now automate exploit development, shrinking the window between discovery and attack.