Cybersecurity experts are calling this month “Black October,” and unfortunately, the name has nothing to do with Halloween. Over the past several weeks, AI developers, government agencies, and private companies have disclosed a wave of cybersecurity incidents. One of the most significant: a pair of decade-old flaws in PHP, the programming language behind an estimated 70% of websites, which researchers uncovered with the help of AI models. Some of this month’s incidents involved hackers using AI tools to hammer an organization’s digital defenses at machine speed; others resulted from plain human error. But many cybersecurity experts agree that this is the beginning of a new era, one in which AI can be used both to defend people’s cybersecurity and to attack it. “AI is making the old vulnerabilities cheaper to discover and exploit, but on the other side, the defense side… that’s not sped up as much,” Junfeng Yang, a computer science professor at Columbia University, told Fortune . “While AI can generate a security patch quickly, it still takes a lot of human time to review and test it and coordinate disclosure and deployment across multiple organizations. Humans don’t work at the speed of AI. That is the asymmetry right now.” Read more [paywall removed for Redditors]: https://fortune.com/2026/10/29/black-october-ai-cyberattacks-hackers-php2shell/ submitted by /u/fortune
Originally posted by u/fortune on r/ArtificialInteligence