Cybersecurity teams worldwide are racing to fix critical software vulnerabilities believed to have been discovered with the help of artificial intelligence, raising concerns about a growing wave of cyber threats described by some as “Black October.”
PHP, a programming language estimated to power nearly 70% of websites, is at the centre of the latest security concerns. The newly disclosed flaws could allow attackers to execute malicious code remotely and take control of vulnerable systems.
Researchers associated with Google’s cybersecurity firm Wiz and AI company Calif reportedly identified the PHP vulnerabilities in August using advanced AI models. However, the situation escalated in October after details of the flaws became public, prompting businesses and governments to rush to secure their systems. Some European government websites were reportedly taken offline as a precaution.
Other major security incidents followed. GitLab disclosed a serious vulnerability affecting software releases spanning approximately 12 years, while Oracle released a fix for a critical flaw in Java. Separately, reports emerged of dangerously weak cryptographic keys that could undermine digital security.
Experts warn that AI is accelerating the discovery of software weaknesses, giving defenders less time to respond before attackers exploit them.
Chris Krebs, former director of the US Cybersecurity and Infrastructure Security Agency, urged businesses to scan regularly for vulnerabilities, install patches quickly and consider taking outdated systems offline if they cannot be secured.
Security specialists have also advised individuals to enable two-factor authentication, use password managers and strengthen protections for connected devices.
The incidents highlight a growing cybersecurity challenge: while AI can help researchers identify and fix vulnerabilities faster, criminals may use the same technology to exploit unpatched systems.
As AI-assisted security research advances, experts say the speed of distributing fixes and securing vulnerable systems will be crucial to preventing further attacks.
