{"id":14509,"date":"2026-10-25T06:01:04","date_gmt":"2026-10-25T06:01:04","guid":{"rendered":"https:\/\/krikis.lt\/ai-atranda-php-saugumo-spraga\/"},"modified":"2026-10-25T06:01:04","modified_gmt":"2026-10-25T06:01:04","slug":"ai-atranda-php-saugumo-spraga","status":"publish","type":"post","link":"https:\/\/krikis.lt\/en\/ai-discovers-php-security-vulnerability\/","title":{"rendered":"AI discovers PHP security flaw that could have become a major cyber threat"},"content":{"rendered":"

In early August 2026, Sagi Tzadik, a security researcher at cybersecurity firm Wiz, asked an artificial intelligence agent to check whether a security flaw found in WordPress could be applied to the Drupal platform. Eight hours later, the agent reported that the test had failed, but at the same time it had discovered a bug in the PHP programming language, the language on which both WordPress and Drupal depend and which is used by up to 70% of the web\u2019s content.<\/p>\n

Tzadik initially thought the AI was mistaken\u2014\u201eModels tend to hallucinate,\u201c he told TIME magazine. But it turned out that the exploit, which took advantage of a decades-old PHP vulnerability, actually worked. The flaw had gone unnoticed for more than a decade before the AI exposed it. At the same time, a team of other researchers from cybersecurity firm Calif., working with OpenAI, also used AI to find a related vulnerability. This suggests that as AI reaches a certain level of proficiency, old, long-undetected vulnerabilities become visible.<\/p>\n

AI as a defense tool and its limits<\/h2>\n
\"Server<\/figure>\n

AI companies are working to give defense specialists like Wiz and Calif early access to the latest models so they can find loopholes before malicious users can exploit them. This time, they succeeded \u2013 AI helped discover a PHP vulnerability before it was widely distributed. This situation reveals a new era in cybersecurity, where AI quickly identifies vulnerabilities, while also reducing the time it takes to fix them.<\/p>\n

Rapid response and challenges<\/h2>\n
\"Business<\/figure>\n

Although the vulnerability disclosure raised concerns about a possible \u201ecyber apocalypse\u201c scenario, the researchers remained optimistic. \u201eWe are patching vulnerabilities at an incredible rate, and that is improving security overall,\u201c Tzadik said. But the facts show how close the disaster was: information about the flaw began to spread online two days before the planned release of the patch, which forced PHP maintainers to speed up the release of the patch. The patch was released a day ahead of schedule.<\/p>\n

After the patch was not yet available, Calif accidentally posted a video showing their exploit in action. This led to numerous copycat attempts \u2014 Cloudflare recorded thousands of attempts before the official announcement, tens of thousands within 45 minutes, hundreds of thousands within two hours, and eventually millions. Even after the patch was released, some websites, including government sites and Wikipedia, were temporarily taken down as a precaution while security teams implemented the update.<\/p>\n

Cooperation and trust<\/h2>\n

The patching process was an informal sprint: After Calif and Wiz reported the PHP vulnerability, the two companies teamed up. While there was no formal agreement between them, the researchers shared information through common channels, and the process was \u201ebased solely on trust,\u201c according to Tomer Schwartz, Wiz\u2019s CTO. The group of about 15 people communicated almost daily to identify the common source of the vulnerability and develop a patch.<\/p>\n

OpenAI said the PHP bugs are just a few of \u201ea number of significant vulnerabilities we\u2019ve already found and are fixing,\u201c and predicts similar discoveries will increase eightfold in the near future. This raises the question of updating processes, methods, and technologies to keep pace with cyberattackers.<\/p>\n

AI speeds up research, but doesn't eliminate labor intensity<\/h2>\n

AI allows researchers to test multiple hypotheses at once, and traditional research that used to take weeks is now compressed into days or even hours. But even with the help of AI, the explanation for the vulnerability remained unclear\u2014the agent provided only \u201evague\u201c descriptions, so Tzadik and colleagues spent days trying to figure out the cause and finally reproduce the bug. There\u2019s also the issue of cost: research costs and resource requirements remain significant even with AI.<\/p>\n

Conclusions<\/h2>\n

This PHP security flaw shows how AI can become a powerful tool in cybersecurity, but it also reveals that speed and collaboration are essential to avoid potential disasters. While AI helps uncover old weaknesses, it is necessary to constantly update processes and invest in rapid response to prevent malicious users from exploiting these vulnerabilities.<\/p>\n

\u2014<\/p>\n

Crikis IT<\/strong> \u2013 specialists who help companies implement AI and automation solutions in the field of cybersecurity.<\/p>\n

Sources<\/h2>\n