Cybersecurity professionals face brutal month amid wave of major attacks and AI-discovered vulnerabilities

Critical vulnerabilities in PHP, used by roughly 70% of websites, were discovered with AI assistance and disclosed on Oct. 21, prompting millions of exploit attempts recorded by Cloudflare. Governments including France and Finland temporarily restricted website access, while the US NSA warned organizations to patch immediately. Security researcher Illia Polosukhin described the situation as "Security Armageddon," and Anthropic's Jason Clinton warned conditions would worsen. UK citizens were urged to prepare for potential infrastructure disruptions, and US military installations were told to prepare for 90 days of independent operation. Beyond the PHP flaw, cloud platform Railway reported attacker access to customer credentials and API keys, targeting AI providers. Quest Diagnostics confirmed a patient data breach, and GitHub experienced major service disruption highlighting reliance on shared infrastructure.