TLDR
- Experts warn that AI is making it easier to find software weaknesses and attack websites at scale.
- PHP released emergency fixes on October 21, 2026, for two critical vulnerabilities.
- Amazon saw exploitation attempts as early as October 17, four days before public disclosure.
- The UK’s NCSC urged organisations to install the fixes immediately.
- Experts advise users to update devices, secure key accounts, use passkeys and watch for scams.
Cybersecurity experts are warning that AI is making online attacks easier to carry out. The concern centers on tools that find software weaknesses and target websites at scale.
Technology entrepreneur Matt Shumer shared a widely read warning on October 22. He described a growing cybersecurity problem, and some experts have called it “Black October.”
— Matt Shumer (@mattshumer_) October 22, 2026
What Happened With PHP
The warning follows emergency security updates for PHP, software used by many websites around the world. Developers released the fixes on October 21, 2026.
The updates address two critical vulnerabilities. Attackers could use them to take control of vulnerable servers without logging in.
Amazon’s security team saw attempts to exploit the PHP weaknesses as early as October 17. That was four days before public disclosure.
Amazon later saw widespread exploitation attempts. Attempted attacks do not necessarily mean websites were successfully breached.
The UK’s National Cyber Security Centre urged organisations to install the fixes right away. It warned that vulnerable systems may need to be taken offline if they cannot be secured.
Artificial intelligence is part of the concern. Tools that help defenders find vulnerabilities can also help criminals automate attacks and create convincing scams.
The European Union Agency for Cybersecurity has warned that AI is increasingly likely to support malicious operations. Claims of a total internet meltdown remain unsubstantiated.
For individuals, the biggest risks remain stolen passwords, fraudulent transactions, exposed personal information and disrupted online services.
Steps Experts Suggest for Users
Experts list eight steps for everyday users.
1. Update your devices. Install the latest updates for your phone, computer, browser, apps and home router. Turn on automatic security updates where possible.
2. Secure your most important accounts. Start with email, then banking, social media and shopping. Use a unique password for each service and store them in a reputable password manager.
3. Choose passkeys when available. They resist phishing better than passwords. If they are not offered, use two-step verification through an authenticator app.
4. Treat urgent messages with suspicion. Fraudsters may pose as banks, delivery companies or relatives. Never share login codes or move money to a supposedly safe account.
5. Protect your money. Turn on transaction notifications and report suspicious activity promptly. Crypto holders should never reveal wallet recovery phrases and should review exchange security settings.
6. Check your connected devices. Update smart cameras, televisions and routers, and change default passwords. Unsupported devices can leave weaknesses in a home network.
7. Back up important information. Keep copies of documents and photos in secure cloud storage or on an external drive. Check that you can restore them.
8. Watch for breach notifications. If a service confirms your information was exposed, follow its official guidance and change affected passwords.
Website owners face extra risk. They should ask hosting providers whether the latest PHP fixes are installed, since updating personal devices will not protect a server.
The latest developments are the PHP fixes released on October 21, 2026, and Shumer’s warning on October 22.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
