← The Global Intelligence Brief
3 sources
Morning Edition · Thursday, October 22, 2026Published at 1:18 AM EDT · New York
Governments take websites offline to patch two critical PHP flaws
Japan's prime minister and senior ruling-party officials suspended their sites, because the leaked flaws let attackers run code on servers without logging in.
Governments and companies in several countries temporarily took websites offline this week, MercoPress reported. The cause was two critical vulnerabilities in PHP, the programming language behind much of the web. Both allow an attacker to run code on a server without authenticating. In Japan, Prime Minister Sanae Takaichi and senior figures in the Liberal Democratic Party (LDP) suspended their home pages, Jiji Press reported.
The Financial Times reports that government security agencies told companies to act immediately after AI tools uncovered widespread vulnerabilities. The US Cybersecurity and Infrastructure Security Agency (CISA) issued an alert saying the flaws require immediate patching. According to Qualys and Huntress, details leaked online on October 20, before coordinated disclosure and before fixes existed. PHP released patched versions on October 21. Any server running PHP for web requests is exposed. That includes sites built on WordPress, Drupal and Magento.
The episode reverses the usual order of events. Disclosure normally comes after patches are ready, but here attackers and defenders received the details at the same moment. Security firm Patchstack reports that attacks are already under way. Administrators of small government and business sites, who often update slowly, have the most to lose.
Part of a tracked trend
AI Speeds Up Software Exposure
AI tools will keep finding exploitable flaws in widely used software faster than maintainers and governments can patch them, so emergency shutdowns and security spending recur and costs shift to operators of older systems.
Veracity: Plausible
72/100- If true, who benefits
Security vendors, managed hosting providers and artificial-intelligence developers that sell automated vulnerability discovery gain if the incident is framed as proof that AI-found flaws will keep coming.
- The nuance
The leak, the October 21 patches and exploitation in the wild are confirmed. No public source reviewed here shows that AI tools found these two flaws. The Financial Times describes AI finding vulnerabilities in general, so the link to this specific case is an inference and has not been established.
An open-source-intelligence read of how likely this story is true with its real nuance, not a judgment of any outlet. It assesses the claim, weighing independent and adversarial reporting. How we label confidence.
What this means
When AI tools can find flaws in core internet software faster than maintainers can fix them, the cost of security shifts onto everyone who runs older systems. Governments, small businesses and hosting firms pay through downtime and emergency patch work. Managed cloud providers and security vendors gain, because customers move workloads to platforms that patch for them. Consensus treats this as a one-time incident. If the FT account of AI-driven discovery is correct, similar disclosures in other widely used languages and libraries are likely to follow at shorter intervals. The 2021 Log4j flaw is the precedent: it produced exploitation that lasted for years on servers never patched, as well as new regulatory requirements. The likelier outcome within months is binding patch deadlines from US and European regulators for public bodies, and faster migration to managed hosting. Evidence that the flaws were found by human researchers without AI help would weaken the case that this will recur.
Synthesized from: Financial Times Technology · MercoPress · Jiji Press
Townsquare
Start a discussion in Townsquare.
More from this edition
- Brent crude rises to $110 as Washington orders diplomats out of Saudi Arabia
- US and Israel have plans for a short strike campaign on Iran after the November 3 midterms, The New York Times reports
- France's 10-year borrowing cost briefly tops 5% for the first time since 2002 as protests spread
- Egypt moves toward defending Saudi Arabia as Houthi drones reach Saudi cities
- Lula's campaign asks Brazil's electoral court to annul Flávio Bolsonaro's ticket days before the runoff
- Japan says yttrium supplies have stalled under Chinese export controls
- Reserve Bank of India rules out near-term rate cuts while Asian central banks lean toward tightening
Comments
0No comments yet.