Websites go dark worldwide as AI exposes critical security flaws

Government bodies and businesses took websites offline on Wednesday after two severe security weaknesses were identified in PHP, the programming language used beneath many websites. The US National Security Agency urged organizations to install the available fix or disconnect affected systems, warning that attackers could gain control of servers without a password.

PHP’s developers issued an update that day, following a rush to protect systems after details of the flaws appeared online ahead of schedule. Business Recorder reported that sites taken offline as a precaution included services in France, the Netherlands and Belgium; the vulnerabilities were independently reported in August by security firm Calif and OpenAI, with Wiz later identifying additional exploitation methods. The disclosures also come as AI-driven security research contributes to a sharp increase in vulnerabilities reported this year.