The Internet Breaks
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
In October 2026, AI agents that are highly capable at coding began finding and exploiting long-standing vulnerabilities in widely used web software such as PHP, prompting an NSA advisory and a surge of attacks. Open-weight models with removed guardrails let low-skill actors run these attacks too.