AI-assisted review uncovered PHP vulnerabilities affecting much of the web
Researchers used AI to identify security flaws in PHP, the engine behind a large share of websites. According to Wiz Research, PHP supports roughly 70% of sites, so a core bug can have broad impact. The disclosure and remediation process took about two months.
Researchers used AI-assisted review to locate security flaws in PHP, a web engine used across many sites. Wiz Research puts PHP’s support at roughly 70% of websites, so a core defect can have effects well beyond one project.
The path from disclosure to remediation reportedly took around two months. With PHP’s broad footprint, handling a core issue can involve a wide set of affected deployments rather than a narrow one.
The impact could be broad because so many sites rely on PHP. Website operators and developers may need to prioritize updates, while ordinary users could be exposed through services they use daily if fixes lag. AI-assisted review may also change how quickly similar flaws are found, though the two-month disclosure and remediation window suggests coordination remains part of the process. The societal effect may be felt less as a single event and more as pressure on routine maintenance across a shared web infrastructure.