Security officials are alarmed by two critical vulnerabilities in the PHP programming language, which powers nearly 70% of websites. These bugs, discovered partly with AI assistance, demonstrate AI's capability to find flaws humans have missed. Governments worldwide are urging companies to patch these vulnerabilities or take their sites offline. OpenAI highlighted its AI model's role in finding one of the bugs, leading to a swift fix. This discovery challenges skepticism about AI-generated vulnerability reports, proving their potential for significant impact. If exploited, these flaws could grant hackers full control of web servers, enabling website takeover and data theft. The vulnerabilities existed for decades but required complex steps to exploit until now. This situation underscores the internet's reliance on volunteer-maintained open-source software. The gap between vulnerability and exploitability is rapidly shrinking, posing an increased threat. Cybersecurity defenders are preparing for potential attacks leveraging these PHP flaws in the coming weeks.