Incident2026-10-28

AI uncovered critical flaws in PHP and Brotli. Millions of hacking attempts followed but few succeeded. The flaws proved unusually hard to exploit. Defense work at many companies also helped. Experts compare the situation to Y2K. AI is still making it easier to find and exploit weaknesses. The next era of cybersecurity will focus on resilience. Companies should double down on basics like multi-factor authentication. They should also identify critical services to restore first after an attack. AI tools can help protect systems at machine speed. Experts warn the next major vulnerability could arrive within hours.

What changed

AI-discovered PHP and Brotli flaws were expected to trigger widespread automated attacks.

What it unlocks

Companies can focus on resilience and basic cybersecurity principles to mitigate AI-driven threats.

  • 70% of websites use PHP
  • millions of hacking attempts

Sources

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.