Technology · Published October 21, 2026 at 7:17 PM CDT · Updated October 24, 2026 at 6:44 PM CDT

AI-Discovered PHP Flaw Triggers Global Patch Effort and Hacking Attempts

Left 13Center 8Right 1

What's new

A Japanese internet services provider, GMO Internet Group, said it asked the government to deploy active cyber defense measures as it worked to contain fallout from a related hacking incident.

This story is developing. The page was updated October 24, 2026 at 6:44 PM CDT as new reports came in.

What everyone agrees on

A security vulnerability was found in PHP, a programming language used across much of the internet.
The flaw is reported to affect roughly 70%, or about two-thirds, of websites worldwide.
The vulnerability was discovered using AI.
Governments and companies rushed to patch affected systems after warnings were issued.

Each fact above was reported by outlets on the left, center and right.

How each side framed it

Left-leaning outlets · 13

Left-leaning outlets emphasized how AI was used to find the flaw, detailed the scale of websites affected, and reported on hacking attempts following the leak, with some noting hackers appeared to struggle exploiting it.

Center-leaning outlets · 8

Center-leaning outlets focused on the global scramble to patch systems, government warnings such as one from the NSA, and specific fallout cases like a Japanese company requesting government cyber defense help.

Right-leaning outlets · 1

The one right-leaning outlet in the material focused on warning the public about the scale of the vulnerability, noting it put two-thirds of websites at risk.

Still disputed

NBC News reported hackers appeared to be struggling to exploit the PHP flaws, while HuffPost reported millions of hacking attempts had occurred.

Read the original reporting

See a mistake?

A simple way to report a wrong or missing fact, with no sign-up, is coming soon. Every correction will be listed publicly.

This page was written by AI from each outlet's headline and short description, following our published rules. Always check the original reporting.