On Tuesday, the world found out about two massive security vulnerabilities in PHP, a programming language that is used by roughly 70 percent of websites. The flaw was discovered by cybersecurity researchers using a frontier model from OpenAI. If they exploited it, attackers could gain full control of servers, stealing or copying anything inside or simply taking sites offline.

you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 2 weeks ago (5 children)

Saved the Internet

Yeah... this appears to have been overblown.

  • source
  • hideshow 5 child comments
  • [–] 6 points 2 weeks ago (3 children)

    I mean, the national cybersecurity council here saw exploits happening in the wild. So it's definitely possible and practical enough for it to happen.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 12 points 2 weeks ago (2 children)

    Hi, can you please provide some sources for this? I can't seems to find anything official. Thanks

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 2 weeks ago

    https://nltimes.nl/2026/10/23/dutch-cybersecurity-center-investigating-first-signs-hackers-abused-php-issues

    Official source this is based on is https://www.ncsc.nl/en/alerts/update-php-vulnerabilities-remain-a-reason-for-immediate-patching, which mentions they're investigating signs of exploits and that they have at least one confirmed exploit that happened abroad.

    It's still a complex exploit, mind, but not an unusable one.

  • source
  • parent