You may already know about this one.

An AI tool helped researchers find a problem with the core software for the internet.

What happened is that PHP, which runs approximately 70% of the internet’s websites, has a vulnerability.

Hackers can take advantage of this problem and take control of your site without logging in.

That means your super strong password is meaningless.

The fix is released, and most good hosts will have patched their servers already.

But only for PHP 8.2 and newer.

If your site runs on PHP 8.1 or older, it’s not getting the fix.

Check your hosting control panel for your PHP version.

If it’s 8.1 or below, upgrade it.

That might break an old theme or plugin, so update WordPress, your theme and your plugins first.

If something still breaks, that’s when you might need to rewrite parts of it.

If you’re not sure, ask your host. A good one will tell you straight away.

So yes, AI found a problem.

We have to fix it.

I used AI to check my sites for issues, we found a few that are now patched.

You can use AI to patch plugins that aren’t working correctly.

You can use AI to update abandoned plugins that you still want to use.

When you’re patching plugins, make sure you ask the AI tool, or a different one, to check the completed work for security holes.

And test it on a copy of your site before it goes live.

Keeping your software up to date is boring.

So are most of the things that make a business work.

Nobody tells you about either until something goes wrong.

This covers the business side:

https://link.ckv.to/profit-wormhole

Regards,
​​​​​​​Brent.

P.S. Google’s write-up is here if you want the technical details.

https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619