Japan Forms AI Cyberattack Team as PHP Flaws Trigger Millions of Hacking Attempts
Updated
Updated · Reuters · Oct 23
Japan Forms AI Cyberattack Team as PHP Flaws Trigger Millions of Hacking Attempts
3 articles · Updated · Reuters · Oct 23
Summary
Japan said Friday it will create a team to simulate cyberattacks with AI, aiming to find weak points in technology systems as organizations race to contain risks from critical PHP flaws.
Millions of hacking attempts followed disclosure of the vulnerabilities, which underpin much of the web; PHP developers issued fixes on Wednesday and urged users to update immediately.
SoftBank suspended mobile emergency alerts during maintenance tied to the PHP issue, temporarily halting earthquake, tsunami and evacuation warnings for customers.
JR East restored some services on Friday while keeping others offline for safety checks, after banks, airlines, rail operators and Japanese government agencies shut services this week.
The disruption has stretched from Tokyo to Helsinki, and security experts say AI is accelerating both attack discovery and phishing, raising pressure on defenders to adopt the same tools.
How can an AI attack simulation team protect a nation when the same technology empowers hackers globally?
With millions relying on vulnerable legacy code, is a catastrophic internet-wide collapse inevitable despite emergency patches?
The October 2026 "php2shell" Crisis: How AI-Discovered PHP Flaws Triggered the Largest Global Web Outage in History
Overview
The php2shell crisis began with a stalled fix for a PHP memory bug identified during a 2024 audit, which was delayed by governance issues. In August 2026, AI-powered teams at Calif and Wiz independently discovered the critical vulnerabilities using advanced models like GPT-5.6 Sol and Gemini 4 Argon. After coordinated disclosure, a leak on October 20, 2026, triggered mass exploit attempts and forced the PHP Foundation to release emergency patches early. Global exploit traffic surged, leading governments and companies to take web services offline. In response, the PHP Foundation reformed its governance to speed up future security fixes, highlighting the urgent need for better open-source security and rapid patching in the AI era.