What happened
OpenAI and Google's security unit Wiz used AI to identify security vulnerabilities in PHP that had gone unnoticed for a long time. The disclosure raised concerns across the many sites and applications built on PHP infrastructure.
Why it matters
PHP underpins a large share of the web. Flaws that sat hidden for years show AI's power on both sides of security: the same tools can be used to find holes or to abuse them.
A two-way risk
The core point is that the issue was found and prevented thanks to AI, yet it is also high-risk because of AI. As automated tools speed up vulnerability scanning, patching has to keep pace.
What to do
Teams running PHP-based systems should not delay security patches, should track versions closely and should run vulnerability scans regularly.
