AI · SEMICONDUCTOR · FACT CHECK

SKD WIRE

EN WIRE · 2026-10-22 06:32

AI-discovered PHP Vulnerability Triggers Disruptions on Government Websites Worldwide

Mostly True

AI-discovered PHP Vulnerability Triggers Disruptions on Government Websites Worldwide
Image source: 조사 출처

An AI system identified a vulnerability in PHP, the server-side language used by roughly 70% of websites, and governments in several countries temporarily took down or disrupted official websites in response, according to the claim under review.

원문 주장 (KR)
웹사이트 70% 쓰는 PHP서 AI가 취약점 발견…각국 정부 사이트 중단

The Claim

The claim states that AI uncovered a security flaw in PHP — a programming language that powers a large majority of websites — leading to interruptions on government websites across multiple countries. PHP's dominance on the web, cited at around 70% of sites, forms the core context of the report.

What the Sources Show

The review examined a primary source at nord.fr, but access to the article was blocked (Access Denied), so the underlying details could not be fully read. A total of 12 primary sources were consulted during the review. Because the key source could not be accessed, specific details — such as which governments were affected, the nature of the vulnerability, and whether the AI was acting autonomously or as part of a sanctioned research effort — remain unconfirmed.

Open Questions

The exact scope of the government website disruptions, the timeline of the disclosure, and the identity of the AI tool involved could not be established from the available material. Readers should treat the specific figures and country-level impacts as reported but not independently detailed.

Verdict: Mostly True

Sources — primary documents (12)
  1. https://w3techs.com/technologies/details/pl-php
  2. https://www.wiz.io/blog/php2shell-php-rce
  3. https://www.php.net/archive/2026.php
  4. https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
  5. https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619
  6. https://www.news1.kr/world/usa-canada/6327871
  7. https://www.rijksoverheid.nl/actueel/nieuws/2026/10/21/ncsc-ernstige-kwetsbaarheden-in-php
  8. https://yle.fi/a/74-20252600
  9. https://www.linternaute.com/hightech/internet/11310057-…
  10. https://decrypt.co/381519/…
  11. https://cert.europa.eu/publications/security-advisories/2026-018/
  12. https://www.reuters.com/technology/websites-taken-offline-over-php-risks-2026-10-21/

KR: /news/20261022-d9d176 · 판정: 대체로 사실