AI-discovered PHP bug forces global patch as exploit attempts hit millions

A lab breach, a Ukraine cyberattack and a kernel disclosure also surfaced.

By LineZotpaper

Published23 October 2026

Read Time2 min

Sources20 outlets

The AI-discovered PHP2Shell flaw forced mass patching, site shutdowns and government emergency responses, while attackers logged millions of exploit attempts. A diagnostics breach, a Russia-linked cyberattack in Ukraine and accidental public posting of Linux kernel vulnerabilities also surfaced.

AI-found PHP2Shell flaws force global patch and shutdowns

AI models, including OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon, helped uncover PHP2Shell, critical PHP flaws dating back roughly 20 years. Patches landed after coordinated disclosure, but DeviantArt, 4Chan and the Internet Archive went offline, 32 UK government services were taken offline, Reuters reported South Korea activated an emergency response, and AWS reported millions of exploit attempts starting October 17.

Our story: AI uncovers 'most severe' flaws in PHP, the software running most of the web
Our story: PHP flaws dating back 20 years force websites offline and threaten permanent shutdowns
Reported by aws.amazon.com (via Hacker News)
Reported by Reuters

Russia-linked Ukraine cyberattack

ESET said Russia-linked hackers used a decentralised network in a cyberattack in Ukraine, according to Reuters.

Reported by Reuters

Quest Diagnostics patient-record breach

Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, saying it found the hack Wednesday and notified federal law enforcement. The company said certain patient records were likely accessed, with the scope still under investigation, according to an AP report carried by the Philadelphia Inquirer.

Reported by Philadelphia Inquirer

Linux kernel vulnerabilities leaked to mailing list

Several Linux kernel vulnerabilities were accidentally posted to a public mailing list, according to a Phoronix report linked on Hacker News.

Reported by phoronix.com (via Hacker News)

Sources

‘Limited’ Government services temporarily offline amid PHP cybersecurity issue · The Independent UK
Race to update services' computer systems after cyber-security flaw found · BBC News
Thirty-two Government services offline amid PHP cybersecurity issue · The Independent UK
Thirty-two Government services offline amid PHP cybersecurity issue · STV News
PHP: The three little letters wreaking havoc across the web · The Verge
Russia-linked hackers used decentralised network in Ukraine cyberattack, ESET says - Reuters · "site:reuters.com/world when:1d" - Google News
The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in · Fortune | FORTUNE
Several Linux kernel vulnerabilities accidentally posted to public mailing list · Hacker News: Front Page
Websites taken down worldwide as critical cyber-security update issued · BBC News
A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites · NYT > Technology
Quest Diagnostics reports cyber breach affecting 'certain patient records' · Philadelphia Inquirer
Race to update services' computer systems after cyber-security flaw found · BBC News
AI found a critical PHP flaw. The bigger failure began in 2024. · The New Stack
How did AI discover the internet's massive cyber-security risk? · BBC News
South Korea activates emergency response to PHP security flaws - Reuters · "site:reuters.com/world when:1d" - Google News
PHP’s security scramble is just a preview: AI is digging up flaws faster than maintainers can fix them · The New Stack
What to know about the PHP bug affecting 70% of world's websites · Moneywatch - CBSNews.com
Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure · Hacker News: Front Page
The Morning Risk Report: Meta Ordered to Pay $25 Billion to New Mexico in Data-Privacy Case · Technology - WSJ.com
FCC blocks devices with Huawei surveillance chips from US market · Economy News

Checked

11 claims in this story checked against 4 sources: 4 supported.

Show each claim

SupportedAn AI-discovered PHP flaw forced a global patch as exploit attempts reached millions.BBC News: “Organisations and businesses are still scrambling to update their systems after cyber-security flaws were revealed in a widely-used programming language, PHP.”
Not in the sourcesQuest Diagnostics said certain patient records were likely accessed in a breach.
Not in the sourcesRussia-linked hackers used a decentralised network in a cyberattack in Ukraine, according to Reuters.
Not in the sourcesLinux kernel vulnerabilities were accidentally posted to a public mailing list.
SupportedAI models including OpenAI’s GPT-5.6 Sol and Google’s Gemini 4 Argon helped uncover PHP2Shell.Fortune | FORTUNE: “OpenAI’s GPT-5.6 Sol model seems to have played a key role in this discovery, although other models, including Google’s Gemini 4 Argon, seem also to have played a part.”
SupportedPHP2Shell comprises critical PHP flaws dating back roughly 20 years.The Verge: “The vulnerability exists in every version of PHP dating back roughly 20 years”
SupportedPatches were released after coordinated disclosure.The New Stack: “The PHP project’s fixed releases are 8.2.35, 8.3.36, 8.4.27 and 8.5.12”
Partly supportedDeviantArt, 4Chan and the Internet Archive went offline because of PHP2Shell.The Verge: “including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed.”
Partly supportedThirty-two UK government services were taken offline.BBC News: “The information I have is that 32 Government services are unavailable and four are partially unavailable,”
Not in the sourcesReuters reported that South Korea activated an emergency response.
Partly supportedAWS reported millions of exploit attempts starting October 17.Fortune | FORTUNE: “According to Amazon Web Services, hackers started exploiting php2shell on Oct. 17, prior to the public disclosure. ... as of this writing there have been “millions” of attempts to exploit the bugs”