Article · 23 October 2026

AI Detects Two PHP Flaws, Triggering Millions of Cyberattacks

Banks, airlines, and public administrations take services offline globally after millions of attacks emerge in hours.

Nopubly Newsroom · 23 October 2026 · 2 min read

An artificial intelligence system has uncovered security vulnerabilities in PHP, the programming language that powers 70% of websites worldwide. The discovery immediately triggered millions of cyberattacks within a matter of hours against exposed platforms.

The severity of the issue prompted urgent containment measures across critical sectors. According to El País, banks, airlines, and public administrations globally disconnected their online services following the discovery of these flaws in PHP. The decision aimed to prevent unauthorized access while engineers examined the extent of the vulnerability in their systems.

Technical reporting specifies the exact scope of the incident. As reported by El Confidencial, two security flaws discovered with artificial intelligence put seven out of ten websites at risk. The exposure is widespread because of PHP's deep footprint in web servers and page development.

The speed at which millions of attack attempts were launched underscores how modern vulnerability research compresses defense timelines. Once an automated tool reveals an underlying flaw in widely adopted software, exploitation attempts follow almost instantaneously. The decision by financial entities, airlines, and government agencies to switch off public portals shows that preventive downtime was prioritized over the risk of compromise.

This episode highlights how heavily internet infrastructure relies on shared legacy code. Because PHP underpins seven out of ten web destinations, any fundamental vulnerability turns into an immediate global security incident.

What changes for people who use or work with AI

For software engineers and cybersecurity teams, the discovery confirms that automated code-analysis models can locate deep-seated security gaps faster than conventional audits. Organizations must apply similar automated inspection methods to their own repositories before external actors leverage them.

For businesses delivering digital services, the operational shutdowns seen across banks and airlines demonstrate that proactive disconnection remains a primary containment tactic when fundamental dependencies fail.

In governance and risk management, the incident pushes companies to reevaluate supply-chain exposures tied to open-source programming stacks across critical networks.

What to keep in mind

• Two security vulnerabilities in PHP discovered using artificial intelligence exposed 70% of websites.
• The discovery led to millions of cyberattack attempts recorded in just a few hours.
• Banks, airlines, and public administrations shut down online services to contain the threat.

Key questions

What vulnerabilities were uncovered and who is affected?

Two security flaws were discovered in PHP using artificial intelligence, exposing 70% of websites across the globe.

What were the immediate consequences of the discovery?

Millions of cyberattacks occurred within hours, leading banks, airlines, and public administrations to disconnect online services.

Why is this issue so critical across the web?

Because PHP is a pervasive programming language underpinning seven out of ten websites worldwide.

Methodology & corrections: Drafted by Nopubly’s automated newsroom strictly from the verified sources linked above, under our editorial criteria. Spot an error? See our corrections policy or write to contact.