Leak Exposes AI-Found PHP Bugs Before Fixes for Long-Obscure Flaws
Updated
Updated · The Guardian · Oct 30
Leak Exposes AI-Found PHP Bugs Before Fixes for Long-Obscure Flaws
3 articles · Updated · The Guardian · Oct 30
Summary
Details of newly discovered PHP vulnerabilities were leaked before patches could be issued, shifting concern from the bugs themselves to the premature disclosure.
The flaws were found by an AI tool scanning PHP source code, not by hackers, and the report describes them as long-standing, extremely obscure bugs that had caused no known harm.
That has fueled criticism of the human leak rather than the AI-assisted discovery, with one commentator arguing such disclosures should be illegal if they are not already.
The episode also fed broader worries about fragile, poorly understood technology stacks and weak security maintenance across legacy-dependent systems.