AI tools uncover surge of software flaws, warning of looming internet outages
Artificial intelligence systems have identified a wave of new software vulnerabilities that could spark further disruptions similar to recent government website outages.
Advances in artificial intelligence have accelerated the detection of software vulnerabilities, with research showing a year-on-year doubling of flaws uncovered. The surge follows this week’s outages on European government sites after critical PHP bugs were exposed, prompting many operators to temporarily take sites offline while they patch. AI also revealed issues in Node.js, Plex, the AI gateway LiteLLM, the development platform Railway, and a fragile cryptographic key used by Indian certificate authority eMudhra.
Experts warn that AI can scan code continuously and produce exploits in hours, compressing the window for defenders to respond. While some argue the newly found bugs are exotic and hard for attackers to exploit, others note aggressive attempts to weaponize the PHP flaw have so far failed. Cloudflare chief executive Matthew Prince likened the situation to confronting monsters: frightening now, but ultimately beneficial as the flaws will be fixed.
Why it matters
Rapid AI-driven bug discovery could increase cyber-attacks and force frequent internet service disruptions.
How this story developed
- Oct 21 PHP to Issue Two Critical Emergency Patches Within 12 Hours
- Oct 21 EU’s CERT‑EU recommended that organisations unable to patch consider taking vulnerable sites offline.
- Oct 21 AI tools identified two severe remote-code execution bugs in PHP, forcing governments and companies to pull or patch sites as a fix was rushed out.
- Oct 22 German state portals, including Berlin and Hessen, were restored after applying the emergency PHP patches.
- Oct 22 Emergency patches for PHP 8.x have been released as the vulnerability spreads.
- Oct 22 Additional governments—including Denmark, the United Kingdom, Hungary, France, the Netherlands and Finland—temporarily disabled public websites while applying the PHP patches.
- Oct 23 Hong Kong’s Digital Policy Office issued an urgent advisory to patch the PHP vulnerabilities.
In this story
Related stories
8 in this thread