Governments and organizations around the world began scrambling on Oct. 21, 2026, to fix a vulnerability in software that runs their websites, a bug that could give hackers access to data and control of websites. The flaw in PHP, the programming language that powers much of today’s web, prompted urgent warnings from the U.S. National Security Agency, cybersecurity agencies and software vendors.

A researcher at Calif, a security research firm, found the flaw in August 2026 using an advanced artificial intelligence model from OpenAI. The firm alerted the nonprofit that manages PHP. However, word of the flaw leaked before the PHP organization released patches for its software, and according to Amazon Web Services officials, hackers began “broadly” attempting to exploit it.

The vulnerability has implications far beyond a single company or platform, because PHP is a key piece of software that helps run millions of websites. So, what is PHP, what role did AI play in uncovering the vulnerability, and should the average user worry?

PHP: The foundation of the web

PHP is a programming language that powers most websites. For a modern website to provide dynamic content, visual elements and searchable features, a program must run on the web server and take user input, whether that is entering a web address or........

© The Conversation