Australian websites hit after AI finds PHP vulnerability

• Researchers led by OpenAI discovered a major remote code execution vulnerability in the PHP programming language using AI tools.
• The flaw triggered widespread disruptions to government websites across Australia, the United States, the United Kingdom, Finland, and the Netherlands.
• Cybersecurity agencies worldwide advised organisations to rapidly apply security patches as official guidance becomes available.

Global government websites experienced widespread outages after OpenAI led a research group that used artificial intelligence agents to uncover a critical vulnerability in the PHP programming language.

The discovery prompted immediate emergency responses from international cybersecurity agencies, as PHP powers an estimated 70% of all websites worldwide.

“We consider this bug to be one of the most impactful vulnerabilities in recent memory,” said OpenAI in a public statement regarding the incident.

The flaw allows malicious actors to remotely execute code, leading to confirmed disruptions on high-profile Australian portals, including cyber.gov.au, alongside foreign government sites.

The Australian Signals Directorate issued an urgent advisory instructing all domestic organisations and individuals to closely monitor their systems and prepare security updates.

The Australian Signals Directorate continues to monitor national systems, advising all operators to apply official security patches as soon as developers release them.