Two AI-found flaws in PHP, the code behind most websites, took sites offline worldwide: check your host has patched

OpenAI says its partner Calif found a critical flaw in PHP using GPT-5.6 Sol, while Wiz independently reported both. PHP runs about 69% of sites whose server language is known, including WordPress. Fixes are out. The NSA and the UK's National Cyber Security Centre advise taking a site offline if it cannot be updated at once, and Cloudflare's CTO said early attacks were appearing.

• Ask your web host or web designer today which PHP version your site runs and whether the fixed release is installed. PHP 8.1 and older get no official fix, so those sites need moving to a newer version.
• If your site takes orders or customer details and your host cannot confirm a patch, consider taking it offline until they can. Sites on Squarespace or Wix do not use PHP.

Source: The Verge. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. Image: OpenAI, from its own announcement. How we source and credit