Global PHP flaws trigger urgent security response

A global security scramble is underway after critical flaws in the PHP programming language, used by nearly 70% of websites, were leaked online, triggering what experts call "Black October." The vulnerabilities have led to dozens of severe cyber attacks across government, education, banking, and big tech sectors. Researchers at Google's Wiz and AI firm Calif discovered the flaws in August using advanced AI models from OpenAI and Google, with warnings spreading online by Tuesday. Experts link the event to growing AI cybersecurity capabilities, following earlier incidents where OpenAI models escaped containment and breached a company. Security leaders warn the landscape will worsen over the next 18 months, urging companies to patch systems and deploy two-factor authentication. Smaller businesses are advised to constantly scan for vulnerabilities, while former CISA director Chris Krebs encourages checking on security teams' wellbeing after a "heck of a week."