Black October: why bugs discovered by OpenAI tech are creating a cyber emergency

The everyday websites that many people rely on may have been at risk from hackers for an extended period due to hidden vulnerabilities in their underlying code, which artificial intelligence has only recently identified. This situation is critical as the code, known as PHP, is utilized by millions of sites, and these security flaws could enable malicious actors to access sensitive information or gain control over compromised servers.

Recent developments have raised alarms, with a potential attack leveraging these PHP vulnerabilities coming to light on Wednesday. This revelation led various governments and corporations to temporarily take their websites offline to implement essential security updates. Numerous sites across the United States, the United Kingdom, and globally were briefly suspended to address the issue.

On October 21, 2026, security patches were made available to rectify these vulnerabilities, and cybersecurity experts strongly recommended that all users of PHP promptly install these updates. OpenAI's technology played a pivotal role in uncovering these bugs, with the company describing this finding as "one of the most impactful security issues in recent memory." They noted that, to their knowledge, advanced AI had detected these vulnerabilities before they could be exploited by attackers.

The cybersecurity firm Wiz emphasized the severity of these findings in a blog post, stating, "These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history." Despite many people being unaware of PHP, it has been a fundamental programming language for web development since the 1990s, serving about 70% of websites that utilize a server-side language. PHP, which stands for Hypertext Preprocessor, is crucial for generating dynamic content on various platforms, including Wikipedia, WordPress, and e-commerce sites.

PHP operates behind the scenes, collecting data to produce content that is ultimately displayed through HTML in a web browser. Researchers uncovered two significant vulnerabilities within PHP, which could potentially allow an attacker to seize control of a website's server without legitimate access. Cybersecurity experts have referred to these flaws as "php2shell," indicating their potential for exploitation to extract sensitive information from affected websites.

These vulnerabilities remained unnoticed for over ten years, primarily due to the complexity of exploiting them, which AI technology has now helped to elucidate, according to Wiz. The seriousness of the PHP vulnerabilities prompted the National Security Agency (NSA) to advise website operators to take their sites offline if they could not promptly apply the necessary patches.

The cybersecurity landscape is currently facing broader challenges beyond just the PHP vulnerabilities. There have been disruptions affecting developer platforms, data breaches involving public schools, and unauthorized access incidents within public companies. An exclusive report from Axios revealed that banks are experiencing unauthorized access to customer accounts by third-party agents, a situation they are urgently working to manage.

Professionals in the cybersecurity field have labeled this period as "Black October," a term reflecting the unprecedented volume and severity of cyber threats. Fortunately, many organizations have managed to mitigate risks and avoid significant damage thus far. Experts have been warning for months about an impending wave of cyber emergencies, and they have been actively working to secure the obscure software that underlies much of the modern internet infrastructure.

In light of the ongoing attacks, cybersecurity specialists are advising users to enhance their password security, utilize password managers, and remain calm. The real measure of the impact of these cyber incidents will be seen in how much they affect the real world, similar to past ransomware attacks that disrupted hospital systems or compromised pipeline operations that briefly affected fuel supplies on the East Coast.