With reference to AI-discovered PHP programming flaws, consider the following statements: 1. Wiz estimates that approximately 70% of the internet is affected by these flaws. 2. The National Cyber Security Centre (NCSC) is a cybersecurity body in the United States. 3. A PHP2Shell exploitation attempt was reported on 17 October. Which of the statements given above is/are correct?

Wiz estimates 70% of internet affected by AI-discovered critical PHP programming flaws

GS3Economy · S&T · Environment · Security· IT, AI, semiconductors & computing· Prelims· 22 October 2026

AI-driven vulnerability discovery and systemic risk in open-source software: a GS3 Science & Technology case study.

Why in news

The UK government and NCSC are addressing critical PHP programming flaws discovered by AI, which Wiz estimates affect approximately 70% of the internet.

Background

Wiz estimated that 70% of the internet is affected by AI-discovered critical flaws in the PHP programming language. Major entities including Amazon, Wikipedia, and the Dutch cybersecurity agency took actions, including taking services offline, to mitigate risks.

Facts for Prelims

FactWiz estimated 70% of the internet is affected by the AI-discovered PHP flaws.
BodyNCSC: National Cyber Security Centre of the UK government.
FactA 'PHP2Shell' exploitation attempt was reported on 17 October.

Prelims practice question

With reference to AI-discovered PHP programming flaws, consider the following statements:

Wiz estimates that approximately 70% of the internet is affected by these flaws.
The National Cyber Security Centre (NCSC) is a cybersecurity body in the United States.
A PHP2Shell exploitation attempt was reported on 17 October.

Which of the statements given above is/are correct?

(a)1 only
(b)1 and 2 only
(c)1 and 3 only
(d)1, 2 and 3

Show answer

Answer: (c) 1 and 3 only — Statements 1 and 3 are correct. Statement 2 is incorrect: The NCSC is the National Cyber Security Centre of the UK government.

For Mains

Q. Discuss the implications of AI-driven vulnerability discovery on global cybersecurity infrastructure and the necessity of proactive software auditing.

Dimensions to cover in your answer

Asymmetric threat: AI-driven automated exploitation outpacing traditional manual patch management cycles.
Systemic risk: High dependency on legacy PHP code across critical infrastructure and global web services.
Regulatory gap: Lack of standardized mandatory security protocols for open-source language vulnerabilities.

Keywords: Cybersecurity · Artificial Intelligence · Vulnerability Assessment · Open Source Software · Systemic Risk

Read the full news →Report a mistake in this note How notes are made Source: BBC ↗Also: GS3 · Cyber security

More Science & Technology notes

AI discovers severe PHP flaws allowing attackers to seize servers and steal data · 22 October 2026
Dr Shivkumar Kalyanaraman to discuss if India can build a research superpower · 22 October 2026
NSA warns two critical PHP holes allow attackers to infiltrate 70% of internet · 21 October 2026
Ministry of Defence signs ₹770 crore contract with BEL for LLLR-I radar system · 21 October 2026
Telangana approves ₹424.5 crore SPV to establish 37 automated vehicle testing stations · 21 October 2026
CrowdStrike reveals four threat groups using agentic AI to compromise global targets · 21 October 2026

All Science & Technology current affairs →

Something wrong, or something missing?

Spotted a mistake in a note, or want a topic, format or PDF that would help your preparation? Write to us. We read every mail and fix errors fast.

Report a mistake →Ask for something →[email protected]

This note is generated automatically from SatyaDheesh's news feed and mapped to the UPSC CSE syllabus. Check facts against the original report or PIB before using them in an answer.