AI-linked programming flaw precedes websites going dark
Government agencies and companies around the world shut down websites Wednesday after two PHP security flaws came to light, according to Euronews. Euronews said OpenAI’s GPT-5.6 Sol model was used in the Calif research and that PHP powers around 70% of the world’s websites.
AI-assisted synthesis · Based on 5 outlets' reporting · Article text read from 1 of 5 outletsHow it's made
View timeline · 9 entriesWhat happened
Key facts
- The headline says AI exposed a major security flaw in a programming language.
- The headline says websites went dark after the flaw was exposed.
The brief
Government agencies and companies around the world shut down websites Wednesday after two security flaws involving PHP came to light, Euronews reported. The outlet described PHP as a programming language that underpins a large share of the internet and said it helps power around 70% of websites worldwide.
Euronews connected the research to artificial intelligence, reporting that OpenAI said its GPT-5.6 Sol model was used in research conducted in Calif. The account does not give a more specific location for Calif or describe the research process.
Its report links the research, the disclosure of the flaws and the website shutdowns, but does not spell out the technical sequence behind those events. The PHP security team gave both vulnerabilities a severity rating of 9.2 out of 10, according to Euronews. That figure applies to each of the two flaws.
The outlet’s account does not explain the scoring criteria or provide technical details about the vulnerabilities. The immediate documented action was the shutdown of websites by government agencies and companies in different parts of the world.
Euronews does not identify which agencies or companies took those steps, how many websites they shut down, or whether the shutdowns affected public access, internal services or both. France 24’s headline also says websites went dark as AI exposed security flaws.
Its wording links the AI and the disclosure more directly; Euronews’ article text says the OpenAI model was used in the research and separately reports that the flaws came to light before agencies and companies shut down websites.
The two accounts describe the issue as involving PHP and connect the discovery to AI, while the reporting provides no account from the PHP security team, the affected organizations or OpenAI beyond the statement Euronews attributes to OpenAI about the model’s use.
The reported scale of PHP’s use means the programming language supports a substantial share of websites, but the account does not identify any particular site or service affected by the shutdowns.
Why it matters
- Government agencies and companies shut down websites after the PHP flaws came to light, affecting online access to the sites they took offline.
- PHP helps power around 70% of the world’s websites, so the reported security issue concerns software used across a broad share of the web.
- The PHP security team rated each of the two vulnerabilities 9.2 out of 10 for severity.
What to watch next
- Whether the PHP security team provides further information about the two vulnerabilities or their severity ratings.
- Whether government agencies and companies identify the websites they shut down and explain the scope of those shutdowns.
- Whether OpenAI provides further details about GPT-5.6 Sol’s use in the Calif research.
How it's being covered
Coverage analysisShow details5 source articles · 5 unique outletsOutlet political mix: Center Only· 5 CenterWhere the outlets are based: Europe 60% · US/Canada 20% · Other 20%
- Coverage is currently concentrated among Center-rated outlets (5 of 5 rated sources); comparatively few Left or Right-rated outlets have published on the event.
One source is from a wire service (AP, Reuters, AFP or Bloomberg), whose reporting other outlets often republish.
How outlets' accounts compare
Timeline
Developments from this story's sources, dated background we compiled and fact-checked, and our earlier coverage. Each row says which.- Rasmus Lerdorf began developing PHP tools to manage his personal web page.Background · compiled and fact-checked by Updat3
- Lerdorf released the first public version of PHP, called Personal Home Page Tools.Background · compiled and fact-checked by Updat3
- PHP 3, released in 1998, established the language’s modern name and extensible architecture, helping it become a widely used server-side language.Background · from our historical context
- The PHP team released PHP 4.Background · compiled and fact-checked by Updat3
- The PHP team released PHP 5.Background · compiled and fact-checked by Updat3
- The PHP team released PHP 7.Background · compiled and fact-checked by Updat3
- The PHP team released PHP 8.0.Background · compiled and fact-checked by Updat3
- PHP 8.4, released on November 21, 2024, was a major step in the language’s development before the current security episode; its release added features and fixes within the PHP 8 series.Background · from our historical context
- The PHP team released PHP 8.4.Background · compiled and fact-checked by Updat3
How we got here
PHP 8.4, released on November 21, 2024, was a major step in the language’s development before the current security episode; its release added features and fixes within the PHP 8 series. Rasmus Lerdorf began PHP in 1994 as tools for managing his personal web page; he released the first public version in 1995 as Personal Home Page Tools.
PHP 3, released in 1998, established the language’s modern name and extensible architecture, helping it become a widely used server-side language.
Original sources
5 articles from 5 outletsEvery story links to the reporting it was built from. How we choose sources
Spotted a factual error, a broken link or a misleading summary? Tell us.