Governments are taking their own websites offline over 2 bugs that AI helped find. 🚨 The bugs are in PHP, the programming language behind roughly 70% of websites, including WordPress, Drupal and Joomla sites. They had been sitting there for over a decade. Together, they let an attacker run commands on a server without a password or an account. Who found them: → Calif, auditing PHP for OpenAI's "Patch the Planet" initiative with GPT-5.6 Sol → Google's Wiz, using Gemini 4 Argon, GPT-5.6 Sol and its own tool, Wiz Atlas → Wiz says one researcher did in a week what would have taken a world-class team months → Both were reported in August and kept quiet until the patch on Oct 21 How the world reacted: → The NSA told organizations to take sites offline if they can't patch right away → Germany, France, Belgium, the Netherlands, Finland and the Czech Republic took some government sites offline → Japan's Prime Minister posted a warning → Cloudflare's CTO says early attacks are already showing up If you run a PHP site, do this now: → Update PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 → On PHP 8.1 or older? It's out of support, so move to one of those versions. → On shared hosting? Ask your host if their PHP is patched. Updating WordPress alone won't fix it. The PHP Foundation's warning: "Tools now find bugs faster than ever, for defenders and attackers alike." Who will AI help more, defenders or attackers? 🤔 Btw... We're running our first creators council. If you write content about AI and have +50k followers, fill this form: https://bolmol.com/Go/YCloqUM0 Ten spots available. In our scholarship, you'll learn how to produce viral content and get sponsorships. See you inside!