PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat
A critical vulnerability in PHP, the programming language powering approximately 70% of websites, was discovered in August 2026 by researchers using an advanced OpenAI AI model. After the nonprofit PHP organization was alerted, the flaw became public prematurely, prompting urgent warnings from the US National Security Agency and AWS, which reported hackers "broadly" attempting exploitation. The article explains PHP's foundational role in modern web infrastructure and examines the vulnerability's far-reaching implications across millions of websites globally.
Key points
- PHP powers ~70% of websites; vulnerability affects millions of sites.
- Flaw discovered using OpenAI's AI model; disclosed before patches available.
- NSA and AWS issued urgent warnings; hackers began active exploitation.
- Demonstrates risks of AI-accelerated vulnerability discovery and disclosure race.
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Conversation Tech did the reporting; read the original for the full story.
Read the full story at The Conversation Tech
