On Tuesday, the world found out about two massive security vulnerabilities in PHP, a programming language that is used by roughly 70 percent of websites. The flaw was discovered by cybersecurity researchers using a frontier model from OpenAI. If they exploited it, attackers could gain full control of servers, stealing or copying anything inside or simply taking sites offline.
https://nltimes.nl/2026/10/23/dutch-cybersecurity-center-investigating-first-signs-hackers-abused-php-issues
Official source this is based on is https://www.ncsc.nl/en/alerts/update-php-vulnerabilities-remain-a-reason-for-immediate-patching, which mentions they’re investigating signs of exploits and that they have at least one confirmed exploit that happened abroad.
It’s still a complex exploit, mind, but not an unusable one.