Chainguard CEO Leaks PHP Flaws Triggering Global Cyber Panic

Chainguard CEO Dan Lorenc prematurely released information regarding critical vulnerabilities in the PHP programming language on Wednesday, breaking a coordinated disclosure embargo. The flaws were discovered using AI tools through a process coordinated by OpenAI. The leak triggered a global cybersecurity panic, leading government agencies in the United States, United Kingdom, Canada, Australia, and Europe to issue urgent warnings and temporarily take websites offline as a precaution.

Lorenc claimed he released the data because the flaw was already being exploited. Following the announcement, Cloudflare CEO Matthew Prince reported millions of exploit attempts, and Amazon's cloud division confirmed the flaw was being broadly exploited in the wild. The PHP Foundation expressed disappointment over the breach of trust.

Cybersecurity officials from Germany and the Netherlands noted that while AI accelerates the discovery and exploitation of flaws, it also allows for faster detection. OpenAI warned that similar AI-driven vulnerability findings are expected to increase sharply in the coming months.