# OpenAI and Google's Wiz uncover critical PHP vulnerabilities affecting 70% of websites

Published: 2026-10-21 · Updated: 2026-10-21 · Category: Safety

Source page: https://www.sipply.dev/story/openai-and-googles-wiz-uncover-critical-php-vulnerabilities-ff9508ba · 中文: https://www.sipply.dev/zh/story/openai-and-googles-wiz-uncover-critical-php-vulnerabilities-ff9508ba

## Summary

OpenAI and Google's Wiz have identified two significant vulnerabilities in PHP, a programming language utilized by approximately 70% of websites. These flaws, which have existed since 2004, pose serious security risks, potentially allowing attackers to access sensitive information. In response to this alarming discovery, the NSA has issued a warning urging website administrators to either update their systems or temporarily take them offline to mitigate the risks associated with these vulnerabilities.

## Key takeaways

- Two critical vulnerabilities in PHP could compromise 70% of websites.
- The flaws have been present since 2004 and are now under urgent scrutiny.
- Website administrators are advised to update or take down their sites to prevent attacks.

## Why it matters

The discovery of these vulnerabilities highlights the ongoing security challenges faced by widely used programming languages, emphasizing the need for regular updates and vigilance in web security.

- **Product managers:** Product managers should prioritize security updates and communicate the urgency of addressing these vulnerabilities to their teams, ensuring that their products remain safe and trustworthy.
- **Developers:** Developers must stay informed about security vulnerabilities in the tools they use and implement best practices for regular updates and security audits to protect their applications.
- **Students and job seekers:** For students and job-seekers, understanding the importance of security in software development is crucial, as it is a key factor that employers consider when hiring for tech roles.

## Sources

- [PHP Armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet](https://techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet) (TechCrunch AI, 2026-10-21)

## 中文

### OpenAI和谷歌的Wiz发现影响70%网站的关键PHP漏洞

OpenAI和谷歌的Wiz已识别出PHP中的两个重大漏洞，该编程语言被大约70%的网站使用。这些自2004年以来存在的缺陷构成严重的安全风险，可能允许攻击者访问敏感信息。针对这一令人担忧的发现，NSA已发出警告，敦促网站管理员更新系统或暂时下线，以减轻与这些漏洞相关的风险。

**要点：**

- PHP中的两个关键漏洞可能危及70%的网站。
- 这些缺陷自2004年以来存在，目前受到紧急审查。
- 建议网站管理员更新或关闭他们的网站以防止攻击。

**为什么重要：** 这些漏洞的发现突显了广泛使用的编程语言面临的持续安全挑战，强调了定期更新和网络安全警惕的重要性。

---
Sipply: Sip AI News Simply. https://www.sipply.dev