‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking

Live updates

1. 2h ago

   AI-Driven PHP Flaws Trigger Global Security Crisis

   Global cybersecurity experts are sounding the alarm over a wave of software vulnerabilities dubbed Black October, sparked when artificial intelligence tools uncovered critical remote code execution flaws in the PHP programming language. The security crisis affects services spanning governments and businesses worldwide, as AI-powered agents help locate and exploit bugs at an unprecedented speed. While global response coordination is underway through initiatives like Patch the Planet, millions of web services face severe risks. Some reports note that hackers are currently struggling to exploit certain PHP flaws, even as hacking attempts rise sharply.

   Why it matters

   The underlying security threat has existed in the PHP programming language for twenty-two years, but artificial intelligence dramatically accelerated the crisis by uncovering hidden code flaws in just two days. This technological leap has sparked a major debate across the tech industry regarding whether AI is accelerating cyberattacks to a point that overwhelms human security teams. Governments and enterprises are scrambling to contain the fallout from the leaked vulnerabilities as experts warn of a vulnerability tsunami.

   What is confirmed

   • Critical remote code execution vulnerabilities affecting a vast majority of the internet have been uncovered in the PHP programming language by artificial intelligence.
   • Governments and businesses around the globe are scrambling to contain the fallout after PHP vulnerabilities leaked online.
   • Hacking attempts have risen following the discovery of security flaws in the program affecting a large portion of websites.
   • The major internet security threat had been present in code for twenty-two years before AI agents exposed it as a crisis in a matter of days.

   Still unconfirmed

   • Hackers are currently struggling to exploit the PHP flaws despite the global cybersecurity crisis.
   • AI-discovered bugs may soon trigger fresh disruptions across global digital networks.

   What to watch next

   • Deployment of security patches through global response coordination efforts like Patch the Planet
   • Further evidence regarding whether hackers can successfully automate exploits using the discovered PHP flaws
   • Additional software vulnerability disclosures driven by AI systems
   Sources used for this update (22)

   1. wiz.io — PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
   2. OpenAI — Patch the Planet: global response coordination as agents uncover critical vulnerabilities
   3. The New York Times — What Is PHP? Why Are Government and Business Websites Going Offline?
   4. NBC News — Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis
   5. NPR — Hacking attempts rise after flaws found in program affecting 70 percent of websites
   6. CNN — The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days
   7. Reuters — AI-discovered bugs may soon trigger fresh disruptions, cyber experts say
   8. CNBC — AI's 'Black October': Critical PHP flaws set off global security scramble
   9. The Atlantic — The Safe Internet Is Shrinking
   10. The Guardian — ‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking
   11. The Times of India — Two critical PHP flaws trigger global alert; millions of services face cyber risk
   12. WSJ — AI Hacks Are Coming Thick and Fast and Overwhelming the Internet
   confidence 90%