AI Tools Find Critical PHP Flaws

On October 21, 2026, the PHP team released a patch for critical remote code execution vulnerabilities affecting versions since 5.4. The U.S. National Security Agency warned that AI tools from OpenAI and Google's Wiz discovered these flaws impacting roughly 70% of websites, including 33 million sites. Hackers can now exploit versions previously too hard to attack.