Axios
Follow
Black October: why bugs discovered by OpenAI tech are creating a cyber emergency
Artificial intelligence has recently uncovered critical vulnerabilities in PHP, a programming language that powers an estimated 70% of websites. These flaws, which have likely existed for years, could allow hackers to steal sensitive data like passwords or gain complete control over affected servers. The discovery was made by OpenAI's technology, which found the bugs before malicious actors did. Following the revelation, governments and companies temporarily took dozens of websites offline to install necessary security patches. These patches were released on October 21, 2026, and cybersecurity firms are urging immediate installation. The vulnerabilities, dubbed "php2shell," were difficult to exploit without AI assistance, explaining their long period of undetected existence. This incident highlights the ongoing challenges in securing the foundational software of the internet. Cybersecurity professionals are referring to this period of increased attacks as "Black October." Experts advise users to secure their passwords and utilize password managers, while also avoiding unnecessary panic.