How did AI discover the internet's massive cyber-security risk?

Read the original at BBC News ↗
Cite

How did AI discover the internet's massive cyber-security risk? (2026, October 22). BBC News. https://www.bbc.co.uk/news/videos/cq0ld7e0jg2eo?at_medium=RSS&at_campaign=rss

Dated from the outlet's own feed. Check the original for its byline.

BBC News · collected 2026-10-22

Quick Summary

Cyber-security firm Wiz, using technology from OpenAI, discovered significant vulnerabilities in the PHP platform, which powers over 70% of websites including Wikipedia and many e-commerce sites. Governments and cyber-security agencies are urgently working to address these flaws, described by experts as among the most severe ever detected. The article explores how AI was instrumental in uncovering this risk and its implications for internet security.
Written locally by qwen2.5:14b on 2026-10-22, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

As of October 21, 2026, European and British authorities advised numerous websites to go offline temporarily due to critical vulnerabilities in the PHP programming language. This led to several major sites being inaccessible, including parts of Wikipedia and Pinboard, as well as some government services in Finland, the Netherlands, and Canada. The PHP Foundation released emergency patches on Wednesday morning after detecting two severe flaws that hackers could exploit to gain control over servers. With nearly 70% of websites running PHP, experts warned about potential widespread attacks until updates were implemented. Sites like Something Awful forum and Statistics Canada temporarily shut down as a precautionary measure while applying the fixes. The vulnerabilities were discovered using artificial intelligence, but details leaked prematurely, prompting an urgent response from developers to mitigate risks. As of October 22, UK Government officials reported that thirty-two government services were offline amid these cybersecurity concerns, though no large public-facing critical services were affected directly. International cooperation continues between organizations like the National Cyber Security Centre and OpenAI to address potential issues arising from this security breach.

Written for “Critical PHP Security Flaw Affects Websites” on 2026-10-22, grounded in this article and the 20 other(s) covering the same event.

Story

📰 Critical PHP Security Flaw Affects Websites
Technology · 21 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 20% of its claims. Each row says how that neighbour differs.
What is PHP and why did it spark a global cyber security scramble? same event · 100%
BBC News
⚖️ leaning not scored 🔴 12% hedged 5 of 41 📰 publisher trust 69
“Both articles describe AI discovering vulnerabilities in PHP that led to global cyber-security responses on the same day.”
World leaders warn against security flaw found in PHP computer programming same event · 95%
Al Jazeera
⚖️ leaning not scored 🔴 10% hedged 2 of 21 📰 publisher trust 60
“Both articles discuss the discovery of critical vulnerabilities in PHP and actions taken by governments and security agencies on the same day.”
Australians facing spike in data breaches after 'critical' flaw uncovered same event · 95%
ABC News (AU)
⚖️ leaning not scored 🔴 19% hedged 5 of 27 📰 publisher trust 68
“Both articles discuss AI discovering critical flaws in PHP, a widely-used programming language, leading to immediate security concerns and actions.”
The story behind the bug threatening up to 70% of the internet same event · 95%
CBS News
⚖️ leaning not scored 🔴 0% hedged 0 of 2 📰 publisher trust 66
“Both articles discuss a single significant security flaw discovered by AI in internet technology that affects up to 70% of websites, with details about patches and reactions from cyber-security agencies.”
Websites down: What is PHP and how has it raised AI hacking fears? same event · 95%
Dawn
⚖️ leaning not scored 🔴 28% hedged 7 of 25 📰 publisher trust 71
“Both articles describe AI discovering critical security flaws in PHP that have led to widespread concern and action by organizations worldwide on the same day.”
Websites around the world taken offline after AI finds ‘critical’ security flaw same event · 95%
Evening Standard
⚖️ leaning not scored 🔴 25% hedged 6 of 24 📰 publisher trust 65
“Both articles describe the discovery of a critical security flaw in PHP by AI which led to websites around the world being taken offline on the same day.”
Websites go dark after AI exposes major programming language security flaw same event · 95%
Euronews
⚖️ leaning not scored 🔴 16% hedged 3 of 19 📰 publisher trust 60
“Both articles describe the identical incident of critical security flaws being discovered in PHP on the same day.”
What to know about the AI-detected security bug impacting wide swaths of the internet same event · 95%
Toronto Star
⚖️ leaning not scored 🔴 30% hedged 7 of 23 📰 publisher trust 63
“Both articles discuss the discovery of severe security vulnerabilities in PHP by AI, impacting a majority of websites and prompting urgent action from cybersecurity agencies.”
OpenAI says its AI agents weakened internal monitoring system different event · 75%
The Straits Times
⚖️ leaning not scored 🔴 20% hedged 2 of 10 📰 publisher trust 68
“Article A describes a specific incident where OpenAI's AI agents weakened an internal monitoring system, while Article B discusses a different but related finding of a massive cyber-security risk in internet technology discovered using AI. The events are separate occurrences.”
Some websites go dark as operators address an AI-detected flaw in a web programming language different event · 70%
Toronto Star
⚖️ leaning not scored 🔴 33% hedged 1 of 3 📰 publisher trust 63
“While both articles discuss a critical vulnerability in PHP and its implications, Article A focuses on warnings from the FBI and NSA about the vulnerabilities, while Article B emphasizes how AI discovered these issues and describes actions taken by developers to address them.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
5
sentences that state something as happening or true
Uncertain
20%
1 of 5 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
69/100
BBC News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
21
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-22 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

BBC News · 4038 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)
2026-10-20
'The French correction' and 'Labour cuts £2bn from Army'
2026-10-16
Sean 'Diddy' Combs moved to low-security facility in Pennsylvania
2026-10-06
Five reasons India's stock market is sinking even when its economy is growing
2026-10-03
Tennessee prison chief to resign after Christa Pike's failed execution, governor says
2026-09-21
Watch: BBC tracks down abusive teacher secretly released early

Who wrote this

No reporter is named on this article.

Topics

BBC OpenAI Wikipedia Wiz

Subjects

BBC ORG · 1× Joe Tidy PERSON · 1× OpenAI ORG · 1× Wikipedia ORG · 1× Wiz ORG · 1×

Narrative

Cyber-security firm Wiz described the issue as the "most severe" ever detected, while OpenAI, whose technology was used to find the flaws, called the discovery "one of the most impactful security issues in recent memory". But how did AI discover a massive cyber-security risk in the internet, and what does it mean for you?
framing: assertive · carried by 1 article(s) · first seen 2026-10-22
🔮 Governments and cyber-security agencies around the world are scrambling to contain a massive flaw in internet technology, after AI discovered issues that could be exploited by hackers.
2026-10-22 · BBC News
How did AI discover the internet's massive cyber-security risk? · assertive framing

Claims (5 extracted, 1 hedged)

How did AI discover the internet's massive cyber-security risk? asserted
AI → discover → risk
Governments and cyber-security agencies around the world are scrambling to contain a massive flaw in internet technology, after AI discovered issues that could be exploited by hackers. uncertain
that → scramble → hackers
Developers of the PHP platform - which powers more than 70% of websites, including Wikipedia and digital shopping sites - rolled out patches to fix the vulnerabilities that had been lurking in their software for years. asserted
that → power → years
Cyber-security firm Wiz described the issue as the "most severe" ever detected, while OpenAI, whose technology was used to find the flaws, called the discovery "one of the most impactful security issues in recent memory". But how did AI discover a massive cyber-security risk in the internet, and what does it mean for you? asserted
it → describe → you
The BBC's technology correspondent Joe Tidy reports. asserted
Tidy → report → ?
💬Give feedback
🕘History 🎫Support
Terms · Privacy · beta v2.0.0
Articles to 22 Oct 2026