← Azimuth Daily
Capturing data…
Capturing data…
SUN, 25 OCT · 77 ITEMS
Hacker News, New York Times, Mainichi Shimbun + 9 more · AI & Technology
19 outletsFraming varies: Coverage is largely aligned on the facts, but sources differ in emphasis: some highlight the AI discovery angle (CNBC, NYT), others focus on national responses (Meduza, Nikkei), and several offer opinion pieces on significance (Guardian, Vox); however, no strong partisan split is evident.
Two severe security flaws in the programming language, nicknamed 'Black October,' were discovered with the help of artificial intelligence by security firm Wiz Research. Because PHP powers roughly 70% of all websites, these vulnerabilities allow attackers to execute malicious code remotely, potentially taking over servers and stealing data. The discovery has triggered a global scramble to patch systems, with many organizations taking websites offline as a precaution, and there are early signs that attackers are using AI to exploit the flaws.
The claim originates from research published by Wiz Research, which uncovered the vulnerabilities using AI. The reporting from TechCrunch and numerous other outlets (including The New York Times, BBC, and Times of India) confirms the same core facts: two critical PHP bugs, discovered with AI, affecting a large fraction of the web. The '70%' figure is an estimate of PHP's market share and is widely cited; the general scale is well-supported, though the precise proportion of vulnerable sites may vary.
Genuinely new; the story emerged in late October 2026, with the vulnerabilities publicized around October 21-24.
We covered this story on October 22, 2026, under the headline 'Critical PHP vulnerabilities force global website shutdowns,' reporting on the immediate global response including government websites being taken offline.