{
    "archive_path": "archive/1792793202.010464",
    "base_url": "www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability",
    "basename": "cybersecurity-ai-hacking-php-vulnerability",
    "bookmarked_date": "2026-10-23 22:06",
    "canonical": {
        "archive_org_path": "https://web.archive.org/web/www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability",
        "dom_path": "output.html",
        "favicon_path": "favicon.ico",
        "git_path": "git/",
        "google_favicon_path": "https://www.google.com/s2/favicons?domain=www.theguardian.com",
        "headers_path": "headers.json",
        "htmltotext_path": "htmltotext.txt",
        "index_path": "index.html",
        "media_path": "media/",
        "mercury_path": "mercury/content.html",
        "pdf_path": "output.pdf",
        "readability_path": "readability/content.html",
        "screenshot_path": "screenshot.png",
        "singlefile_path": "singlefile.html",
        "warc_path": "warc/",
        "wget_path": "www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability.html"
    },
    "domain": "www.theguardian.com",
    "extension": "",
    "hash": "11B07DYWDD6Z96ME6KNV",
    "history": {
        "archive_org": [],
        "dom": [],
        "favicon": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--output",
                    "favicon.ico",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.google.com/s2/favicons?domain=www.theguardian.com"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-24T01:18:50.090139+00:00",
                "index_texts": null,
                "output": "favicon.ico",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:49.632908+00:00",
                "status": "succeeded"
            }
        ],
        "git": [],
        "headers": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--head",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-24T01:18:50.433018+00:00",
                "index_texts": null,
                "output": "headers.json",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:50.100355+00:00",
                "status": "succeeded"
            }
        ],
        "htmltotext": [],
        "media": [],
        "mercury": [
            {
                "cmd": [
                    "/app/node_modules/@postlight/parser/cli.js",
                    "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
                ],
                "cmd_version": "1.0.0",
                "end_ts": "2026-10-24T01:18:58.070350+00:00",
                "index_texts": null,
                "output": "mercury",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:54.282035+00:00",
                "status": "succeeded"
            }
        ],
        "pdf": [],
        "readability": [
            {
                "cmd": [
                    "/app/node_modules/readability-extractor/readability-extractor",
                    "/tmp/tmp78mr6bj9",
                    "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
                ],
                "cmd_version": "0.0.11",
                "end_ts": "2026-10-24T01:18:54.266503+00:00",
                "index_texts": [
                    "Leaders in cybersecurity are sounding the alarm after the discovery of a major vulnerability this week. They are predicting that artificial intelligence tools will expose more fundamental weaknesses in global internet infrastructure in the months to come.\u201cI no longer think we\u2019re going to be able to patch all bugs,\u201d said Sam Altman on Thursday evening, joining the chorus of executives. In the midst of what\u2019s being called \u201cBlack October\u201d, for which researchers used AI to help identify critical flaws in a coding language that is used across millions of websites and may have been unpatched for years, tech executives are warning about the ways AI will be used both to identify and exploit security vulnerabilities at an unprecedented scale and pace.The next few months will see a \u201cvulnerability tsunami\u201d, according to Jason Clinton, Anthropic\u2019s deputy chief information security officer. \u201cThere won\u2019t be enough time to patch critical infrastructure,\u201d Clinton said in a post on X on Thursday evening. Marc Benioff, the Salesforce CEO, agreed and called it a \u201ccode red\u201d.AI is uniquely able to find and identify security flaws in a way and at a pace that will feel catastrophic because the security community will not be able to move quickly enough to address them, said Matthew Prince, the Cloudflare CEO. \u201cIt\u2019s going to feel like the sky is falling. It\u2019s going to feel like there\u2019s nothing we can do.\u201cThe next two years are going to be incredibly, incredibly, incredibly fraught with new tools that have infinite patience to go look for vulnerabilities across the Internet,\u201d he wrote in a post on X.While cybersecurity experts have been warning about a \u201cvulnpocalypse\u201d, or the ability for AI to more easily identify security bugs for months, it wasn\u2019t until \u201cBlack October\u201d that researchers were able to use AI to find a flaw as fundamental and critical as the one announced on 21 October.Massive bugs were found in a programming language called PHP, which may have left the millions of websites that run on it vulnerable to hackers for years. Some experts estimated 70% of all the sites on the internet were at risk of hacking.However, in the same way AI will be used to aid in identifying security vulnerabilities at an unprecedented pace, tech leaders worry it\u2019ll also be used by malicious actors to exploit those bugs at an unprecedented pace.Attempts to exploit the PHP vulnerability have already begun.After the vulnerabilities were announced, government and private websites across the US and UK temporarily took down their sites to patch the bugs. The US National Security Agency (NSA) issued an alert recommending any site that runs on PHP implement the patches immediately. Malicious cyberactors may seek to further exploit these bugs to access servers without authorization, the NSA said.\u201cSuch an access vector could help attackers steal sensitive data, disrupt services or move deeper into a network,\u201d the warning read.skip past newsletter promotionafter newsletter promotionIn a post on X, Prince said CloudFlare, a security provider, had seen evidence of thousands of people trying to exploit the PHP flaws in the 10 hours before it was announced.\u201cThat jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now,\u201d he wrote.In a blogpost, researchers at AI security platform Wiz said that this was \u201camong the most severe vulnerabilities discovered in PHP, and arguably in software history\u201d.\u201cThe underlying flaws had been present for decades, but demonstrating their exploitability required an exceptionally complex chain of steps, at the edge of what human researchers could practically achieve,\u201d they wrote."
                ],
                "output": "readability",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:52.140322+00:00",
                "status": "succeeded"
            }
        ],
        "screenshot": [],
        "singlefile": [],
        "title": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-24T01:18:52.132430+00:00",
                "index_texts": null,
                "output": "\u2018Black October\u2019: cybersecurity experts sound the alarm over new era of AI-enabled hacking | Technology | The Guardian",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:52.067680+00:00",
                "status": "succeeded"
            }
        ],
        "wget": [
            {
                "cmd": [
                    "wget",
                    "--no-verbose",
                    "--adjust-extension",
                    "--convert-links",
                    "--force-directories",
                    "--span-hosts",
                    "--no-parent",
                    "-e",
                    "robots=off",
                    "--reject=js,mjs,woff,woff2,ttf,otf,eot,mp4,m4v,mov,webm,ogv,mkv,avi,flv",
                    "--timeout=120",
                    "--restrict-file-names=windows",
                    "--page-requisites",
                    "--user-agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) wget/GNU Wget 1.21.3",
                    "--compression=auto",
                    "--timestamping",
                    "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
                ],
                "cmd_version": "GNU Wget 1.21.3",
                "end_ts": "2026-10-24T01:18:52.058604+00:00",
                "index_texts": null,
                "output": "www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability.html",
                "pwd": "/data/archive/1792793202.010464",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-24T01:18:50.449024+00:00",
                "status": "succeeded"
            }
        ]
    },
    "icons": null,
    "is_archived": true,
    "is_static": false,
    "latest": {
        "archive_org": null,
        "dom": null,
        "favicon": "favicon.ico",
        "git": null,
        "media": null,
        "pdf": null,
        "screenshot": null,
        "singlefile": null,
        "title": "\u2018Black October\u2019: cybersecurity experts sound the alarm over new era of AI-enabled hacking | Technology | The Guardian",
        "warc": null,
        "wget": "www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability.html"
    },
    "link_dir": "/data/archive/1792793202.010464",
    "newest_archive_date": "2026-10-24T01:18:54.282035+00:00",
    "num_failures": 0,
    "num_outputs": 6,
    "oldest_archive_date": "2026-10-24T01:18:49.632908+00:00",
    "path": "/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability",
    "schema": "Link",
    "scheme": "https",
    "snapshot_id": "6b9555cd-9e3a-48b0-a44f-220579f17e4e",
    "sources": [
        "/data/sources/1792793202-import.txt"
    ],
    "tags": ",pool,war-wiki,world_news",
    "tags_str": "pool,war-wiki,world_news",
    "timestamp": "1792793202.010464",
    "title": "\u2018Black October\u2019: cybersecurity experts sound the alarm over new era of AI-enabled hacking | Technology | The Guardian",
    "updated": "2026-10-24T01:18:49.632480+00:00",
    "updated_date": "2026-10-24 01:18",
    "url": "https://www.theguardian.com/technology/2026/oct/23/cybersecurity-ai-hacking-php-vulnerability"
}