Few successful attacks so far as AI-found PHP flaws fail to spark a wave of hacking

Summary

Security researchers say the PHP vulnerabilities that prompted widespread panic last week have proven unusually difficult to exploit, despite a flood of attempts to build working attack code. Millions of hacking attempts have so far yielded few successful attacks, which Axios describes as an apparent lucky break, and the defense work many companies have done appears to have helped. Some researchers compare the episode to the Y2K problem, and industry leaders warn that AI-driven attacks remain a serious threat. The sheer volume of AI-discovered bugs suggests the next era of cybersecurity will be defined by resilience, meaning how quickly a company can detect an intruder, contain the damage and recover.

Timeline

1. Axios

   28 Oct 2026, 09:15 UTCSource ↗

   Axios reports that the PHP vulnerabilities behind last week's panic have proven unusually difficult to exploit, that millions of hacking attempts have yielded few successful attacks, and that the sheer volume of AI-discovered bugs makes resilience the defining focus of the next era of cybersecurity.