Security teams worldwide scrambled this week to patch critical vulnerabilities in PHP—software that underpins an estimated 70% of websites—after researchers using advanced AI models uncovered serious flaws. The episode, dubbed “Black October,” underscored how rapidly AI can accelerate both the discovery of weaknesses and the speed at which attackers exploit them. Corporate security leaders urged boards to fund basic defenses, warning the risk environment may worsen over the next 18 months. Former CISA Director Chris Krebs cautioned small and midsize firms to scan continuously, patch quickly, or retire legacy systems. The alarm follows months of heightened concern over AI’s offensive potential, including model-control lapses and incidents tied to third-party platforms.
Related articles:
CISA Known Exploited Vulnerabilities Catalog
AI Risk Management Framework (AI RMF 1.0)
