Global websites shut down after AI found a critical flaw affecting 70% of the internet
AI-Assisted Discovery Triggers Urgent Fix for Major PHP Security Flaws
Healfromzero.com – Government and corporate websites in several countries briefly went offline Wednesday as operators rushed to address a serious set of PHP vulnerabilities that researchers say could place a large share of the internet at risk.
The vulnerabilities, known collectively as PHP2Shell, were identified through work involving OpenAI, Google-owned cybersecurity company Wiz, and cybersecurity firm Calif. The flaws may let attackers run malicious code remotely and access portions of a server’s memory, potentially exposing sensitive material such as passwords.
PHP is a widely used programming language behind many websites and online services. Because it is deeply embedded in internet infrastructure, a critical weakness in PHP can create an urgent challenge for organizations that rely on it. The PHP Foundation has released patches and urged website operators to apply the updates immediately.
A Rapid Response Across Web Infrastructure
The public disclosure came only after a fix was available. Researchers had found the bugs in late August, but details were held until Wednesday so software maintainers and infrastructure providers could prepare a response.
Cloudflare, which worked with the PHP Foundation, Calif, OpenAI and Wiz on the issue, warned that the weaknesses could enable remote code execution, service disruption and exposure of customer information. Those risks explain why some site operators chose temporary downtime while applying updates rather than leaving vulnerable systems available to the public.
Some European government websites were taken offline during the update effort. The National Security Agency also encouraged organizations using PHP to either patch affected systems or remove them from service when an immediate update was not possible.
For website operators, the incident highlights a basic but important security reality: a patch is only protective once it has actually been installed. Organizations need to identify PHP-dependent applications, test updates where appropriate, deploy fixes promptly and confirm that public-facing services are again running the patched software.
AI Changed the Practical Limits of the Research
The discovery has drawn attention not only because of the possible scale of the affected technology, but also because artificial intelligence helped researchers examine and validate a highly complex exploitation path much faster than traditional methods would have allowed.
Wiz researchers used Google’s Gemini 4 Argon, Wiz Atlas and OpenAI’s GPT-5.6 Sol during the research process. The companies said AI made it possible to conduct cybersecurity work across multiple applications in hours.
“With frontier AI models and the right tools, a single researcher completed in a week what previously would have taken a world-class team months of work,” Wiz researchers wrote in a blog post Wednesday.
The finding arrives amid intensifying concern in government and technology circles that advanced AI systems could accelerate cyberattacks as well as defensive research. In this case, the technology was used to uncover and help remediate a dangerous problem before it became broadly known. Yet the same reduction in time and technical effort could make sophisticated vulnerabilities more accessible to malicious actors in the future.
That tension is increasingly central to cybersecurity planning. Security teams have long used automation to scan for known flaws, analyze logs and prioritize alerts. More capable AI systems can go further by helping researchers reason through complicated software behavior, trace interactions between components and test possible attack chains. The defensive advantage depends heavily on responsible disclosure, fast patching and coordination among software vendors, hosting providers and site operators.
Comparison With Heartbleed
Wiz researchers have compared PHP2Shell with Heartbleed, the 2014 vulnerability in encryption technology that was estimated to affect roughly two-thirds of the web. Heartbleed allowed attackers to retrieve data that was expected to remain protected, becoming one of the most significant internet security incidents of its era.
The comparison does not mean the two flaws are identical. Instead, it reflects the potential importance of a vulnerability affecting technology used across a broad range of websites. Both cases demonstrate how a defect in a common software component can create widespread exposure beyond any one company, government agency or service provider.
Researchers said the PHP2Shell weaknesses had existed for years. The challenge was not simply finding the underlying defects, but proving that they could be exploited through an unusually difficult series of technical steps.
“The underlying flaws had been present for decades, but demonstrating their exploitability required an exceptionally complex chain of steps, at the edge of what human researchers could practically achieve,” Wiz researchers wrote. “Frontier AI models substantially reduced that barrier, turning a longstanding flaw into an exploit.”
That assessment gives the incident broader significance. Vulnerabilities may remain overlooked not because they are harmless, but because exploiting them appears too complicated or costly with existing tools. AI-assisted research can alter that calculation by reducing the labor needed to investigate obscure weaknesses.
What the Incident Means for Organizations
The immediate priority is clear: organizations operating PHP-based services should determine whether their systems are affected and install the PHP Foundation’s security updates without delay. If updates cannot be completed promptly, taking exposed systems offline may be the safer temporary choice.
The longer-term lesson is that patch management must keep pace with a changing threat environment. A flaw that once appeared impractical to exploit may become more dangerous when new analytical tools lower the barrier to finding or demonstrating an attack path.
For internet users, the visible impact may be limited to intermittent website outages or maintenance messages. Those interruptions can be a sign that operators are taking protective action. The PHP2Shell response shows how quickly a newly disclosed weakness can ripple through global web infrastructure—and why coordinated security work remains essential as AI reshapes both the speed of discovery and the urgency of defense.
Related Reading
Frequently Asked Questions
What is Global websites shut down after AI found?Global websites shut down after AI found is the main topic of this guide. The article explains the context, practical details, and next steps readers should understand.
Why does Global websites shut down after AI found matter?Global websites shut down after AI found matters because readers are looking for a useful answer, not just a short summary. Good content should match search intent and help them decide what to do next.