The Cyber Division of the National Security Agency (NSA) in the United States recommends that all internet service providers that use the widely used open-source language PHP shut down their systems or update their software. Previously, OpenAI indicated that one of its models had discovered two "serious" vulnerabilities in the infrastructure of this language.

OpenAI President Greg Brockman posted on X that hackers could exploit this vulnerability to steal users' private data or modify websites.

OpenAI stated in a blog post: "We believe this to be one of the most influential security issues in recent years."

According to OpenAI, these vulnerabilities seemed to have been identified before any attackers could discover them, but their public disclosure sparked a race between companies and governments to update their websites and implement fixes in order to secure them before hackers could take advantage of them.

Cloudflare Chief Technology Officer Dane Knecht posted on X, saying: "We are seeing early-stage attacks emerging, and as new attack vectors appear, we are updating our mitigation measures accordingly."

Many websites, including government and media sites, were taken offline on Wednesday to address this issue.

OpenAI indicates that this serious vulnerability was initially discovered by the cybersecurity research company Calif, which uses GPT-5.6 and Sol. OpenAI also mentioned that another cybersecurity company, Wiz, independently identified these issues as well.

These companies are all members of an initiative led by OpenAI called “Patch the Planet”, which aims to make the global digital infrastructure more secure.

On Wednesday, after OpenAI and other parties publicly disclosed these vulnerabilities, several world leaders issued urgent messages, including the Prime Minister of Japan.

Japanese Prime Minister Sanae Takaichi stated: "We urgently request everyone to take action tonight."