AI Finds Old Coding Flaws, Sparking Global Cyber Security Response

PHP, one of the most widely used programming languages on the internet, has become the centre of a global cyber security scramble after artificial intelligence tools uncovered a series of long-hidden flaws in its code.

PHP underpins a significant portion of websites worldwide, making it a foundational piece of internet infrastructure. Because of its scale of use, any flaw discovered in its code has the potential to affect a vast number of systems simultaneously.

According to reports, AI systems were able to identify vulnerabilities that had gone unnoticed for years, despite extensive prior scrutiny by human developers and security researchers. This raises questions about how such long-standing weaknesses escaped detection for so long.

The discovery prompted what has been characterised as a rare, coordinated international response, as organisations rushed to assess their exposure and apply necessary fixes before the flaws could be exploited by malicious actors.

The episode highlights a growing trend in which AI is increasingly used to analyse source code at a scale and speed beyond human capability. While this offers clear benefits for identifying and patching security gaps proactively, it also raises concerns that the same tools could be used by attackers to discover and exploit weaknesses faster than defenders can respond.

Cyber security experts have noted that this case illustrates a broader shift in the field, where AI is becoming both a powerful defensive tool and a potential new risk factor. The dual-use nature of such technology is likely to shape future debates about how AI should be regulated and deployed in security contexts.

Organisations relying on PHP-based systems have been urged to review their infrastructure and apply patches as they become available. The incident is expected to fuel continued discussion about the balance between innovation and risk as AI becomes more deeply embedded in cyber security practices worldwide.