AI Hacks Are Coming Thick and Fast and Overwhelming the Internet

Live updates

1. 1h ago

   AI-Driven PHP Vulnerabilities Overwhelm Internet Security

   Artificial intelligence tools have superintended a massive wave of critical remote code execution vulnerabilities affecting 70 percent of the internet, driving global government and business websites offline. The security threat, involving a PHP flaw that has been known for 22 years, escalated into a full-scale crisis in just two days thanks to rapid exploitation capabilities powered by AI. Dubbed Black October, the unfolding emergency has triggered an intense international security scramble. Meanwhile, hackers appear to be struggling to properly exploit the widespread PHP flaws following the initial global cybersecurity disruption.

   Why it matters

   The PHP Foundation operates with limited resources, maintaining only one full-time staff member, raising questions about infrastructural support for foundational web software. The sudden escalation from a dormant two-decade-old vulnerability to an active planetary crisis demonstrates how artificial intelligence lowers the technical barrier for large-scale cyberattacks. Authorities and organizations across sectors continue to assess the fallout as critical infrastructure stumbles offline.

   What is confirmed

   • AI uncovered critical remote code execution vulnerabilities affecting 70 percent of the internet under the designation PHP2Shell.
   • A security threat known for 22 years escalated into a crisis in two days due to AI integration.
   • The crisis caused government and business websites to go offline, prompting a global security scramble dubbed Black October.
   • The PHP Foundation has only one full-time staff member and is under-funded according to its director.

   Still unconfirmed

   • Hackers are currently struggling to exploit the PHP flaws in the wake of the global cybersecurity crisis.

   What to watch next

   • Further disclosures from the PHP Foundation regarding emergency patch deployment.
   • Reports of additional government or corporate websites experiencing extended outages.
   • Evidence regarding the specific AI mechanisms used to automate the PHP exploits.
   Sources used for this update (12)

   1. help.naver.com — Futures Flat As Oil Rebounds After Trump's "Energy Ceasefire" Unravels, Memory Stocks Slide | ZeroHedge
   2. wiz.io — PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
   3. The New York Times — What Is PHP? Why Are Government and Business Websites Going Offline?
   4. NBC News — Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis
   5. CNN — The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days
   6. CNBC — AI's 'Black October': Critical PHP flaws set off global security scramble
   7. The Atlantic — The Safe Internet Is Shrinking
   8. Reuters — PHP Foundation 'under-funded' with one full-time staff member, director says
   9. WSJ — AI Hacks Are Coming Thick and Fast and Overwhelming the Internet
   10. The New York Times — The 5 Things You Need to Know About the PHP Security Flaw Breaking the Internet
   11. politico.eu — Inside the cyber flaw scramble that brought the AI threat to life
   12. smallwarsjournal.com — 10/24/26 National Security and Korean News and Commentary
   confidence 90%