Theguardiantheguardian2026-10-30 17:10:09

Credit where it’s due to AI for uncovering the PHP flaw – and discredit to the leaker | Letters

David Gibson says the problem is that details of the flaw were revealed before it was fixed, while Charles MacKinnon notes that we are at the mercy of technology we don’t understand Chris Stokel-Walker may be right (The internet has broken – again.

Summary

Shouldn’t the tech firms that make billions from it pay to fix it?, 22 October), but the real issue lies elsewhere. The bugs in the PHP programming language that were recently found by an AI tool have been present for a long time without anybody noticing and without any harm being done – they are extremely obscure. They were not found by hackers – they were found because an AI tool was used to check the PHP source code, which is a good use of AI.

ai (artificial intelligence)data and computer securityhackinguk newstechnologycomputinginternet

KazaSec's take

Source code, and the third-party packages it depends on, is one of the most overlooked parts of an organization's real attack surface. A secure code review catches exactly this class of issue before it ships, not after it's already public.

Coverage details

Source: Theguardiantheguardian
Published: 2026-10-30 17:10:09
Author: guardian staff
Category: toptechnology

We've archived 434 other articles touching the same topic (ai (artificial intelligence), data and computer security, hacking) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services