ðŸ‡ðŸ‡° English, 23 October 2026, AI-discovered vulnerability
Digital Policy Office Urges Immediate Patching for PHP Flaws
Hong Kong's Digital Policy Office urges government departments to perform immediate security reviews after AI-discovered PHP vulnerabilities.
The security flaws were discovered by AI, with a fix issued on Wednesday afternoon. The flaws could provide a direct path to a server’s database or file system, allowing attackers to bypass security checks.
The PHP flaws had been undetected for over a decade, but were uncovered in a matter of weeks through an OpenAI programme called Patch the Planet.
Wiz said in a blog post that around 70 per cent of the internet may be affected, with early attacks emerging and Cloudflare updating mitigations as new vectors show up.