With reference to the PHP vulnerabilities reported by the NSA, consider the following statements: 1. The vulnerabilities affect approximately 50% of the internet. 2. The flaws have existed since PHP version 5 in 2004. 3. The vulnerabilities were discovered using AI tools like GPT-5.6 Sol. Which of the statements given above is/are correct?

NSA warns two critical PHP holes allow attackers to infiltrate 70% of internet

GS3Economy · S&T · Environment · Security· IT, AI, semiconductors & computing· Prelims· 21 October 2026

Cybersecurity and AI in infrastructure: a GS3 case study on legacy software risks.

Why in news

The NSA warned that two critical vulnerabilities in the PHP programming language, discovered by OpenAI and Wiz using AI tools, could allow attackers to infiltrate 70% of the internet.

Background

The flaws existed since PHP version 5 in 2004 and were identified using GPT-5.6 Sol. Affected sites must update to version 8.5.12 to mitigate risks to file systems and databases.

Facts for Prelims

FactThe vulnerabilities were discovered by OpenAI and Wiz using AI tools like GPT-5.6 Sol.
FactThe flaws have existed since PHP version 5 in 2004.
FactAffected sites powering 70% of the internet must update to version 8.5.12.

Prelims practice question

With reference to the PHP vulnerabilities reported by the NSA, consider the following statements:

The vulnerabilities affect approximately 50% of the internet.
The flaws have existed since PHP version 5 in 2004.
The vulnerabilities were discovered using AI tools like GPT-5.6 Sol.

Which of the statements given above is/are correct?

(a)1 only
(b)2 only
(c)3 only
(d)2 and 3 only

Show answer

Answer: (d) 2 and 3 only — Statements 2 and 3 are correct. Statement 1 is incorrect: The note states they could allow attackers to infiltrate 70% of the internet.

For Mains

Q. Discuss the implications of using Artificial Intelligence in identifying cybersecurity vulnerabilities and the challenges of patching legacy software in global digital infrastructure.

Dimensions to cover in your answer

Legacy software risk: Difficulty of patching 20-year-old vulnerabilities in widely adopted open-source languages
AI-driven security: Shift from human-led to AI-automated threat detection and vulnerability mapping
Infrastructure fragility: High concentration of internet services on a few core programming languages and cloud providers

Keywords: Cybersecurity · Vulnerability Assessment · Open Source Software · Artificial Intelligence · Digital Infrastructure

Read the full news →Report a mistake in this note How notes are made Source: TechCrunch ↗Also: GS3 · Cyber security

More Science & Technology notes

Dr Shivkumar Kalyanaraman to discuss if India can build a research superpower · 22 October 2026
AI discovers critical PHP vulnerabilities as government websites go offline · 22 October 2026
Ministry of Defence signs ₹770 crore contract with BEL for LLLR-I radar system · 21 October 2026
Telangana approves ₹424.5 crore SPV to establish 37 automated vehicle testing stations · 21 October 2026
CrowdStrike reveals four threat groups using agentic AI to compromise global targets · 21 October 2026
Tamil Nadu mandates inspection and repair of rainwater harvesting structures to improve groundwater recharge · 21 October 2026

All Science & Technology current affairs →

Something wrong, or something missing?

Spotted a mistake in a note, or want a topic, format or PDF that would help your preparation? Write to us. We read every mail and fix errors fast.

Report a mistake →Ask for something →[email protected]

This note is generated automatically from SatyaDheesh's news feed and mapped to the UPSC CSE syllabus. Check facts against the original report or PIB before using them in an answer.