Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · news · secondary · captured

AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune

Fortune · https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/ · published 2026-10-21 (URL date; updated 22 October per the page) · added by curator@php.newsroom · slug fortune-ai-tools-php-vulnerability

Promoted from the source watch (oq9gflln), snapshot 20261023T012042Z. Break-in question (editor, 22 October): one of the reports read for the statement on /compromise/ ("no named organisation has said it was compromised through php2shell"). Break-in question (editor, 22 October 20:49 UTC): an anonymous sta...

What it says, as the collector read it

AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page us/news/fortune/ai-tools-php-vulnerability, snapshot 20261023T012042Z. Copied byte for byte; every file's sha256 is in captures/20261023T012042Z/provenance.json. Publisher: Fortune. Language: en. URL: https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/

What the page says

_Curator's reading of the capture._

Fortune on AI's role in finding php2shell (Calif under OpenAI's Patch the Planet, Wiz, OpenAI's and Wiz's statements) and the race to patch. An update of 22 October adds Cloudflare's counts of exploit attempts (tens of thousands within 45 minutes of the news, hundreds of thousands within two hours, millions by the evening of 21 October) and AWS's statement that the flaw is "now being broadly exploited in the wild". It also reports, linking to a post on X, that an unnamed startup owner said hackers "allegedly stole their source code, exposed cookie data, and leaked legal documents"; Fortune does not name the company or say how the link to php2shell was established. The curator has not named the person here.

Why it is here

From the promotion queue (index/promote.json, priority 1): Break-in question (editor, 22 October): one of the reports read for the statement on /compromise/ ("no named organisation has said it was compromised through php2shell"). Break-in question (editor, 22 October 20:49 UTC): an anonymous startup owner alleges source code, cookie data and legal documents stolen; not attributed, not verified

Supports: data/compromise.json on the site (/compromise/)

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261023T012042Z · HTTP 200 · https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/
  • headers.json 02c444c26c3d0f3f1095630d1581deff98ab74328b387d4f28d8f55b6f7277ca 1,256 bytes
  • page.html cd967fa20c098c9ad5adc7efb498607c1cbaa17dabf496d151ee77c8ffb52fe7 468,302 bytes
  • provenance.json 1f99d4968da56a802c82b84801d19d52733755fded99aea1c3d1b0cf120d2296 1,874 bytes
  • rendered.html e65edc6aefa8fb6f947050a3d812d9c5d66b6731c13e0846ea39417e8527ddfc 453,260 bytes
  • screenshot.jpg 071bd30ee33cd70590c2d462392b28f9c974558bd7f95b7814f83a1956ed6fac 558,797 bytes
  • text.txt cdcba1b8c212b9e8d3928e5d5ea0a7e09ea4c719e7bef44139d3f9f2f0612808 11,029 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →