AI speeds up vulnerability discovery – critical PHP vulnerabilities cause service disruptions

According to the Finnish Transport and Communications Agency Traficom, security vulnerabilities are being discovered at a record pace. This means organisations need to respond faster than ever.

Artificial intelligence (AI) is accelerating the discovery and potential exploitation of security vulnerabilities. A recent example involves critical vulnerabilities in PHP, a widely used web technology, which have caused some online services to become temporarily unavailable. According to the National Cyber Security Centre Finland (NCSC-FI) at Traficom, there have so far been no reports of successful exploitation of the PHP vulnerabilities in Finland.

"The critical PHP vulnerabilities are significant because PHP is used extensively in online services. It is important that organisations update their PHP-based websites and other systems as quickly as possible to prevent attackers from exploiting the vulnerabilities," says Roni Kokkola, Information Security Specialist at the NCSC-FI.

By the summer of 2026, the number of security vulnerabilities disclosed internationally had already exceeded the total for 2025. AI is speeding up the discovery and potential exploitation of vulnerabilities, but it is also being used to fix them. However, the discovery of a vulnerability does not mean that a system has been compromised. Fixing a vulnerability is often faster than successfully exploiting it. It is important that organisations install updates without delay and restrict access to vulnerable systems where necessary.

PHP vulnerabilities can disrupt online services

Critical vulnerabilities in PHP, a technology widely used on websites, could lead to intrusions and data leaks in the worst cases. Some organisations have temporarily shut down their online services as a precaution to prevent the vulnerabilities from being exploited.