WORLD · VERIFIED DEVELOPMENT
Chainguard CEO’s Early Leak of PHP Vulnerability Triggers Global Cyber Panic
WHY IT MATTERS
The breach of coordinated disclosure and the rapid exploitation of the PHP flaw demonstrate that AI‑enhanced vulnerability hunting can outpace defensive measures, forcing governments to shut services and revealing a new urgency for tighter security protocols.
What happened
On Wednesday, Dan Lorenc, CEO of cybersecurity firm Chainguard, broke a coordinated‑disclosure embargo by publicly releasing details of a critical PHP flaw that had been discovered with AI tools over months. The premature disclosure left the flaw exposed before a patch was ready, prompting governments in Europe, the U. S.
, the U. K. , Australia and Canada to take major websites offline as a precaution.
Cloudflare’s CEO Matthew Prince reported that the flaw was being exploited in the wild, with millions of attack attempts recorded in the hours after the announcement. Amazon’s cloud division confirmed widespread exploitation. The incident exposed the fragility of established disclosure protocols and highlighted how AI‑driven vulnerability discovery can accelerate cyber risk on a global scale.
PRIMARY SOURCES
Inside the cyber flaw scramble that brought the AI threat to life
POLITICO Europe · Sam Clark · Discovery only; POLITICO copyright and subscription terms apply