How a PHP Flaw Disclosure Sparked a Global Cybersecurity Panic
A premature disclosure of a critical security flaw in PHP, a coding language used by 70% of the web, triggered a global cybersecurity panic this week, exposing millions of websites to potential AI-driven attacks. Chainguard CEO Dan Lorenc broke the coordinated disclosure embargo, saying the flaw was already being exploited, a claim others disputed. His action forced urgent warnings from cyber agencies in the US, Europe, UK, Canada, and Australia, with many governments taking websites offline as a precaution. The incident, discovered using AI tools from OpenAI, highlights the escalating risks of AI-powered cyber threats. While no major damage was reported, officials expect similar vulnerabilities to increase sharply, urging organizations to prioritize patching systems.