PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
- ID
- 37990
- Status
- summarized
- Published
- 22 Oct 2026, 1:59 AM
- Fetched
- 22 Oct 2026, 3:09 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 8.0
- Created
- 22 Oct 2026, 3:09 AM
- Tags
- Audience
- developersvibe_coderssaas_foundersai_agent_users
What happened
The NSA warned that two critical PHP flaws let attackers reach a server’s file system or database, and the PHP Foundation has issued patches. The flaws reportedly date back to PHP 5 from 2004; PHP is used by roughly 70% of websites, more than 33 million by some counts, and the recommended fix is PHP 8.5.12 while PHP 8.1 and older are unsupported. OpenAI’s Patch the Planet using GPT-5.6 Sol and Wiz’s Atlas security AI agent using Gemini 4 Argon and GPT-5.6 Sol found the vulnerabilities, with patches tested before disclosure.
Why it matters
If you run PHP or WordPress, this is a concrete inventory-and-patch decision: check the PHP version, move to 8.5.12 where possible, and if you cannot patch immediately, the NSA guidance is to take the site offline until you can. Founders should confirm their host or agency owns that upgrade path, because PHP 8.1 and older are no longer supported.
Discussion angle
Run a live inventory of PHP and WordPress dependencies and assign an owner for moving each to PHP 8.5.12 or taking it offline if it cannot be patched.