THE NEXT CYBER STORM: AI UNCOVERS HIDDEN SOFTWARE FLAWS, RAISING FEARS OF REPEATED INTERNET DISRUPTIONS
October 23, 2026
Artificial intelligence is accelerating the discovery of software vulnerabilities across the digital infrastructure underpinning the internet, raising concerns among cybersecurity professionals that further outages and cyberattacks could follow the disruptions that affected government websites across Europe and elsewhere this week. Seven cybersecurity experts have warned that the growing pace of AI-assisted vulnerability detection is forcing organisations to confront weaknesses that may have remained hidden in critical software for years.
Research from Massachusetts-based threat intelligence firm VulnCheck indicates that the number of discovered digital vulnerabilities has doubled year-on-year, with artificial intelligence contributing to the increase. Matthew Prince, chief executive of internet infrastructure company Cloudflare, said he was aware of additional serious vulnerabilities in other critical software systems that were still being addressed. He predicted that the coming months could bring repeated security emergencies as AI tools expose weaknesses across the internet.
The immediate warning follows disruptions linked to vulnerabilities discovered in PHP, a programming language used extensively to operate websites. Following the disclosure of the flaws, government agencies and other website operators rushed to assess their systems, install fixes and reduce the risk of exploitation. Some organisations temporarily took their websites offline because they feared attackers might exploit the vulnerabilities before patches could be applied safely.
Patrick Garrity, a researcher at VulnCheck, said the PHP incident had occurred amid an unusually busy period for cybersecurity teams. Other developments included vulnerability disclosures involving Node.js and the Plex streaming programme, breaches connected to the AI gateway LiteLLM and development platform Railway, and concerns about a weak cryptographic key used by Indian certificate authority eMudhra. The succession of incidents has intensified concerns about the exposure of internet-connected systems and the resources required to protect them.
A central concern is the shrinking interval between discovering a software flaw and turning it into a weapon against vulnerable systems. Traditionally, identifying a bug and developing a working exploit could require experienced specialists weeks or months of work, giving developers and system administrators time to prepare updates and deploy them. AI tools can now examine large codebases continuously, identify weaknesses and potentially help construct exploits within hours, sharply reducing the time available for defensive action.
Shane Fry, chief technology officer of Virginia-based RunSafe Security, said the speed at which vulnerabilities can be found and weaponised was changing fundamentally. As AI capabilities advance, security teams may have less time to investigate newly disclosed flaws, test fixes and protect exposed infrastructure before malicious actors attempt to exploit the same weaknesses.
However, cybersecurity experts disagree on whether the growing number of AI-discovered vulnerabilities will inevitably lead to a corresponding increase in successful attacks. Daniel Stenberg, lead developer of the file-transfer tool curl, argued that some flaws discovered by AI are highly complex and difficult for criminals to exploit. Ramy Rahman of cybersecurity company ArmorCode similarly cautioned that a greater number of disclosed vulnerabilities does not automatically translate into more successful cyberattacks.
The PHP incident offered some tentative evidence that discovering a vulnerability and exploiting it successfully are not the same thing. Threat intelligence firm Hunt.io reported aggressive attempts to exploit the flaw, but its head of research, Esteban Borges, said that as of Thursday afternoon in the United States, the cybercriminals he was monitoring appeared not to have developed a working exploitation tool. Prince, meanwhile, said he had seen anecdotal evidence of compromises associated with the vulnerability.
Despite the immediate risks, Prince argued that the discovery of previously concealed weaknesses could ultimately strengthen internet security. In his assessment, AI is exposing defects that might otherwise have remained undetected, creating an opportunity for developers and operators to repair longstanding problems. The process may generate repeated disruptions in the short term, but it could also lead to more resilient software if organisations respond effectively.
The emerging challenge is therefore not simply the growing number of vulnerabilities, but the speed at which they are discovered, disclosed, exploited and repaired. Governments, technology companies and other operators of internet-facing systems face increasing pressure to identify affected software, apply security updates promptly and prepare for further disclosures. Whether AI-driven vulnerability research produces a wave of successful attacks or ultimately improves digital security will depend substantially on how quickly defenders can respond to the weaknesses now being brought to light.
