AI-assisted discovery uncovers two vulnerabilities hidden in PHP for over a decade, prompting multiple banks and government agencies to suspend some online services

AI-assisted source summary · not independently verified. Content standards

AI helped discover two serious vulnerabilities in PHP that could allow attackers to take over affected websites without a password; PHP is used by nearly 70% of websites with a known server-side language. PHP Foundation released emergency security updates, and CISA required organizations to update PHP or take the relevant systems offline if they could not update. Multiple banks in Japan suspended some online services, while government agencies in the Netherlands, France, Denmark, and Finland also shut down websites as a precaution; Japan’s interbank funds settlement network was not affected.