# Source: AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Fortune: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune

**Fortune** · [https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/](https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/) · published 2026-10-21 (URL date; updated 22 October per the page) · added by `curator@php.newsroom` · slug `fortune-ai-tools-php-vulnerability`

Promoted from the source watch (oq9gflln), snapshot 20261023T012042Z. Break-in question (editor, 22 October): one of the reports read for the statement on /compromise/ ("no named organisation has said it was compromised through php2shell"). Break-in question (editor, 22 October 20:49 UTC): an anonymous sta...

## What it says, as the collector read it

#### AI helped discover the PHP vulnerability that could take down 70% of the internet | Fortune

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `us/news/fortune/ai-tools-php-vulnerability`, snapshot `20261023T012042Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T012042Z/provenance.json`. Publisher: Fortune. Language: en. URL: https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/

#### What the page says

_Curator's reading of the capture._

Fortune on AI's role in finding php2shell (Calif under OpenAI's Patch the Planet, Wiz, OpenAI's and Wiz's statements) and the race to patch. An update of 22 October adds Cloudflare's counts of exploit attempts (tens of thousands within 45 minutes of the news, hundreds of thousands within two hours, millions by the evening of 21 October) and AWS's statement that the flaw is "now being broadly exploited in the wild". It also reports, linking to a post on X, that an unnamed startup owner said hackers "allegedly stole their source code, exposed cookie data, and leaked legal documents"; Fortune does not name the company or say how the link to php2shell was established. The curator has not named the person here.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 1): Break-in question (editor, 22 October): one of the reports read for the statement on /compromise/ ("no named organisation has said it was compromised through php2shell"). Break-in question (editor, 22 October 20:49 UTC): an anonymous startup owner alleges source code, cookie data and legal documents stolen; not attributed, not verified

Supports: data/compromise.json on the site (/compromise/)

#### Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T012042Z · HTTP 200 · https://fortune.com/2026/10/21/ai-tools-discovered-the-php-vulnerability-that-could-take-down-70-of-the-internet-now-the-race-is-on-to-patch-it-before-ai-powered-hackers-attack/- `headers.json` 02c444c26c3d0f3f1095630d1581deff98ab74328b387d4f28d8f55b6f7277ca 1,256 bytes
- `page.html` cd967fa20c098c9ad5adc7efb498607c1cbaa17dabf496d151ee77c8ffb52fe7 468,302 bytes
- `provenance.json` 1f99d4968da56a802c82b84801d19d52733755fded99aea1c3d1b0cf120d2296 1,874 bytes
- `rendered.html` e65edc6aefa8fb6f947050a3d812d9c5d66b6731c13e0846ea39417e8527ddfc 453,260 bytes
- `screenshot.jpg` 071bd30ee33cd70590c2d462392b28f9c974558bd7f95b7814f83a1956ed6fac 558,797 bytes
- `text.txt` cdcba1b8c212b9e8d3928e5d5ea0a7e09ea4c719e7bef44139d3f9f2f0612808 11,029 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.10.9 · data as of 2026-10-23T01:20Z · vault commit f3c5db0d9873 · https://php.oct.2026.newsroom.sgit.ai/sources/fortune-ai-tools-php-vulnerability/index.html