"AI Finds Critical Security Flaw Affecting Up to 75% of Websites Worldwide"
- Input
- 2026-10-22 03:50:37
- Updated
- 2026-10-22 03:50:37

A critical security issue in PHP, the technology powering up to 75% of websites worldwide, was confirmed on the 21st (local time). Security researchers discovered the vulnerability using artificial intelligence (AI).
The Wall Street Journal (WSJ) reported that the developers of PHP, a programming language widely used in website development, had found a critical security issue that day. Hackers could seize control of any system running PHP software, the report said.
In response, the developers urgently released a new version that day, fixing two critical security vulnerabilities.
Hackers are reportedly able to exploit the flaw to execute arbitrary code remotely or take control of a system without a separate login or authentication process.
The security flaw discovered this time, called “PHP2Shell,” is a series of defects arising from the way PHP manages computer memory. Hackers can exploit the flaw to run unauthorized software on web servers. Some attacks were completed in just a few seconds.
According to web technology analysis firm W3Techs, about 75% of websites worldwide for which the programming language can be identified are built using PHP. WordPress, a blogging and website-building tool used by about 43% of all websites worldwide, also runs on PHP.
Cutting-edge AI rapidly uncovered a critical security flaw hidden in code that humans had failed to notice for more than a decade.
The security patch had initially been scheduled for release on the 22nd. But news of the patch was leaked in a post on Hacker News on the 20th, so it was ultimately released on the 21st.
[email protected] Song Kyung-jae Reporter