PHP security flaw signals new era as AI finds vulnerabilities at wild scale

Vulnerabilities in the PHP programming language have set off a global shutdown of services and websites, according to Danish tech outlet Ingeniøren. PHP is used in many content management systems such as WordPress, in web applications, and to connect websites to databases like MySQL. The reporting describes the PHP flaws as having caused panic worldwide.

In Denmark, authorities have taken down several services as a result, including AULA, the school communication platform, and the website of the Danish Road Directorate (Vejdirektoratet).

The article's central argument comes from a Danish cyber "national coach", who says we have entered a new era in how vulnerabilities are discovered in foundational programming languages and IT infrastructure. The headline ties this to AI spotting security holes at a very large scale.

Reader comments add some context. One commenter notes that users of Canonical's Ubuntu Pro (ESM) also get a patch for PHP 7.x, an older branch. Another points out that PHP is not the only problem in the same short period. The commenter lists a renewed supply chain attack on LiteLLM, which had also been hit in March 2026, a critical GitLab patch with a severity score of 10.0, and an issue involving an eMudra 4 certificate.

The story matters because it shows how a single flaw in widely used web infrastructure can force public bodies to shut down services, and because it frames AI-driven vulnerability discovery as a shift that will likely bring more such events.