Weird NewsGOOD NEWS
AI Helps Find and Fix Critical Flaw in PHP Before Attackers Do
The PHP Foundation released a patch for the two flaws, which were rated 9.2 on a severity scale; the cleanup took two months of quiet teamwork.
Watch it as it aired: Hank Ledger and Vera Bullock on this story, from Finally, Some Good News at 6:55 PM ET. Cartoon anchors, real headline: the facts are The New York Times's, the jokes are ours.

At a glance
- First reported by The New York Times: “A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites”, with reporting from CNN, X (OpenAI post) and NBC News (via NBC Washington).
- Covered on BBN on Wednesday, October 21, 2026, at 6:55 PM ET on Finally, Some Good News, by Hank Ledger and Vera Bullock.
- Topics: AI.
The real story
The reporting behind this segment. The headlines belong to the outlets; read the original before you believe or share anything.
- The New York TimesA.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites
- CNNAI helped find a critical security flaw affecting 70% of the internet October 21, 2026 · facts used on air
- X (OpenAI post)OpenAI on X: "OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source prog October 21, 2026 · facts used on air
- NBC News (via NBC Washington)AI uncovers critical PHP vulnerabilities, sparking rush for a fix October 21, 2026 · facts used on air
What BBN said about it

Hank Ledger · Lead AnchorResearchers at OpenAI, Wiz and Calif say they used AI to find two serious flaws in PHP, a coding language behind roughly seventy percent of websites, CNN reports.

Vera Bullock · Co-AnchorAnd they fixed it before anyone bad got in. I'm sorry, I'm fine, I just think that's the most beautiful thing I've heard all week.

Hank Ledger · Lead AnchorThe bugs were found in late August and kept quiet until PHP had a patch ready. Then they went public.

Vera Bullock · Co-AnchorWeeks of people keeping a secret just to protect strangers. Hank, that's a surprise party for the whole internet.

Hank Ledger · Lead AnchorOpenAI says it led a two-month coalition of maintainers, researchers and security providers to get the fixes ready.

Vera Bullock · Co-AnchorTwo months. Of group chats. About a patch.

Hank Ledger · Lead AnchorThe National Security Agency is asking everyone who runs PHP to update, or take the system offline if they can't.

Vera Bullock · Co-AnchorThe National Security Agency said please. I've waited my whole life for the government to say please.

Vera Bullock · Co-AnchorSo go update something, everybody, and when you press that button, know that it loves you back.

Hank Ledger · Lead AnchorIt's a button.
More Shorts
All videos →From the archive: everything BBN aired on Wednesday, October 21, 2026 · the Weird News archive · all months


Photo: U.S. Department of State · Public domain · Wikimedia Commons · altered by BBN
Photo: Matthew Binebrink · CC BY-SA 4.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 4.0
Photo: Scott Andrews, Canon · Public domain · Wikimedia Commons · altered by BBN
Photo: NASA Johnson Space Center · Public domain · Wikimedia Commons · altered by BBN
Photo: Official SpaceX Photos · CC0 · Wikimedia Commons · altered by BBN
Photo: שי אפשטיין (Shai Epstein) · CC BY-SA 4.0 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 4.0
Photo: Lori Mazzuca, Lori Mazzuca Fine Art Photography · CC BY-SA 2.5 · Wikimedia Commons · altered by BBN, shared under CC BY-SA 2.5