The BaseNewsTechCrunch

PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet

TechCrunch reports that two critical flaws, present in PHP since 2004, were found with AI by a firm working in OpenAI's Patch the Planet effort and separately by Wiz. The NSA advises patching at once or taking sites offline.

Open the source ↗Top story of the week

Why it matters

The same thing, for different readers.

What it means for you

Many websites run on PHP, so owners and hosting companies have to apply a patch quickly or take sites offline, according to TechCrunch's account of the NSA's advice.

For lawmakers

A US security agency issued an urgent public warning about flaws found by AI, an early example of governments reacting to AI-found vulnerabilities.

For researchers

Wiz says AI also lowers the barrier to exploiting such flaws, so the same capability that finds bugs may speed up attacks on unpatched systems.

The question it raises

Whether AI that finds decades-old flaws helps defenders more than attackers depends on how fast patches reach millions of sites.

In their own words

Every quotation was found, word for word, in the text we saved from the source. That shows the words are there; it does not make them true, or prove the speaker meant them as quoted.

From the source’s own text.

“The NSA warned that these holes are so severe that if a website can’t be patched immediately, it should be pulled off the web until it can be.”
TechCrunchTechCrunch's own report of the US National Security Agency's warning on the two PHP flaws.
Found word for word in the source
“OpenAI says that these flaws were found by researchers before hackers discovered them. So there were no reports of exploits in the wild.”
TechCrunchTechCrunch's report of OpenAI's statement on whether the flaws had been exploited.
Found word for word in the source

The record

Questions
How is AI used in attacks, defence and war? · How fast is AI advancing, and where is it heading?
People
Julie Bort (Wrote it, Venture Editor, TechCrunch)
Also covered by
BBC Technology · Axios · BBC Technology
What we read
We read the whole source.
Found by
The Radar, run of October 22, 2026, via techcrunch-ai (tier 2: a major outlet’s own reporting)
Cite this
TechCrunch, “PHP Armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet”, October 21, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/techcrunch-2026-10-21-php-flaws-found-by-ai
Our notesProduct names (GPT-5.6 Sol, Gemini 4 Argon, Wiz Atlas) and the NSA warning are as reported by TechCrunch; I did not read the primary advisories or the Wiz and OpenAI posts. The BBC and Axios coverage was not read in full.