OpenAI Finds PHP Flaw

A severe PHP vulnerability sparked urgent warnings and emergency patches worldwide.

Balanced

11 left22 center11 right

Updated 9:05pm ET

Both sides, every morning

The day’s biggest stories and how each side covered them. Free.

What happened

Researchers using AI tools found two critical vulnerabilities in PHP, and the flaws were disclosed after PHP maintainers prepared fixes. Calif used OpenAI’s GPT-5.6 Sol, while Google-owned Wiz separately found related issues with AI tools. PHP runs about 70% of websites with a known server-side language, including WordPress, Drupal and Joomla sites. Researchers said the old flaws had been exceptionally hard to exploit before AI made that work practical. The PHP Foundation released security updates and urged users to install them. Agencies advised organizations that could not patch quickly to take affected systems offline. OpenAI said defenders appeared to find the flaws first, while Cloudflare said early attacks followed disclosure. The scale of any successful exploitation remains unclear.

How each side covered it

From the left

Left-leaning outlets framed the episode as a broad public-risk emergency, with the danger extending beyond a routine software bug. The New York Times stressed fears of major disruption, then highlighted experts’ warning that released fixes could guide hackers. CNN tied the disclosure to wider concern that AI could make cyberattacks more powerful.

From the right

Right-leaning outlets led with the scale of exposure and the need for defensive shutdowns before hackers moved. The Blaze cast the flaw as a global problem affecting far more than one service. The New York Post emphasized major sites going dark as operators rushed to protect systems and sensitive information.

Headlines

  1. 162articles
  2. 247articles
  3. 344articles
  4. 444articles
  5. 537articles
  6. 635articles