Weird NewsGOOD NEWS
AI finds major flaw in PHP before it was patched
Researchers at OpenAI, Calif and Wiz used AI models to find two flaws in PHP, which fixes shipped for on October twenty-first; update your toaster.
Watch it as it aired: Vera Bullock and Rosa Ticks on this story, from Finally, Some Good News at 1:27 PM ET. Cartoon anchors, real headline: the facts are BBC's, the jokes are ours.
At a glance
- First reported by BBC: “AI discovered a massive cyber-security flaw - here's what happened”, with reporting from Forbes, Computing and The State of AI.
- Covered on BBN on Thursday, October 22, 2026, at 1:27 PM ET on Finally, Some Good News, by Vera Bullock and Rosa Ticks.
- Topics: PHP, AI.
- BBN covered this story before: PHP flaws found with AI take websites offline worldwide (October 22).
The real story
The reporting behind this segment. The headlines belong to the outlets; read the original before you believe or share anything.
- BBCAI discovered a massive cyber-security flaw - here's what happened
- ForbesAI Just Found One Of The Biggest Internet Vulnerabilities Ever October 21, 2026 · facts used on air
- ComputingPHP rushes out emergency fixes for critical flaws threatening millions of websites facts used on air
- The State of AINSA Sends Emergency Warning to Websites. The Flaws Behind It Were Found by AI. October 22, 2026 · facts used on air
What BBN said about it

Vera Bullock · Co-AnchorResearchers say AI found two serious flaws in PHP, the code behind a huge share of websites, and fixes are already out, the BBC reports.

Rosa Ticks · Live ReporterFixes! Four of them!

Rosa Ticks · Live ReporterEight point five point twelve, eight point four point twenty-seven, eight point three point thirty-six, eight point two point thirty-five! I wrote them on my hand!

Vera Bullock · Co-AnchorRosa, breathe. The point is the people looking for the weak spots got there first and told everybody.

Rosa Ticks · Live ReporterIs that the good part?

Vera Bullock · Co-AnchorThat's the best part. Estimates say PHP runs around seventy percent of websites, so a lot of the internet just got a safer weekend.

Rosa Ticks · Live ReporterThe National Security Agency said install the update or go offline! Offline! Nobody has told me what the office does about the group chat!

Vera Bullock · Co-AnchorAnd that's people being careful, which I find so moving that I need a second.

Vera Bullock · Co-AnchorResearchers at Wiz called it among the most severe flaws ever found in PHP.

Rosa Ticks · Live ReporterMoving how?

Vera Bullock · Co-AnchorSomebody found it, wrote it down, and warned everybody. In my world that's a flaw that took initiative.

Rosa Ticks · Live ReporterI've already updated everything I own, including the toaster!

Vera Bullock · Co-AnchorIn for eight point five point twelve, Rosa. Out for eight point four point twenty-seven. Nice and slow.
More Shorts
All videos →The story so far
- Storm Austen warnings, PHP patch, Raphinha's rise · BBC
- AI Helps Find and Fix Critical Flaw in PHP Before Attackers Do · The New York Times
- PHP flaws found with AI take websites offline worldwide · Japan Today
- AI finds major flaw in PHP before it was patched (this story)
From the archive: everything BBN aired on Thursday, October 22, 2026 · the Weird News archive · all months

Photo: Robert.Harker · CC BY-SA 3.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 3.0
Photo: Robert.Harker · CC BY-SA 3.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 3.0
Photo: Thomas Wolf , www.foto-tw.de · CC BY-SA 3.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 3.0
Photo: Flickr user: Emilio Labrador Santiago de Chile… · CC BY 2.0 · Wikimedia Commons · altered by BBN
Photo: Matt Ellery · CC BY-SA 2.0 · Wikimedia Commons
Photo: Antiquary · CC BY 4.0 · Wikimedia Commons · altered by BBN
Photo: United States Air Force photo by Senior Airman Joshua Strang · Public domain · Wikimedia Commons