Understand this story
On October 26, 2026, Cloudflare CEO Matthew Prince offered his assessment, saying that AI tools will continue to discover new serious software vulnerabilities for years, and that the internet may remain in a state of frequent security crises for the next few years. Citing a recent major PHP vulnerability as an example, he said Cloudflare already knows of equally serious problems in other critical software, which could trigger another global remediation effort once disclosed. Wiz Research said that advanced AI models played a key role in the PHP vulnerability research, being able to deploy multiple AI agents simultaneously to analyze codebases and compress what used to take weeks of work into a few hours; data from EFF and VulnCheck also shows that the number of vulnerabilities discovered with AI assistance has grown markedly. The next day, Prince told Reuters that the recently disclosed php2shell and Broccoli2Shell vulnerabilities are only the beginning, because more and more people are using AI to find security vulnerabilities, and he expects that for years to come every week will feel like the sky is about to fall; Cloudflare was one of the first companies to detect and block php2shell attacks, and he also said he knows of a series of serious vulnerabilities in other critical software components, but did not disclose the names of the projects. Patrick Garrity of VulnCheck and Tobias Glemser of secuvera also agree that the interval between a vulnerability being discovered and being attacked is constantly shrinking.
AI-generated from public reports
Developments
1 confirmed developments
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 27
heise online
Microsoft offers voluntary severance to 60,000 employees; SpaceX and Apollo reach a $40 billion AI chip leasing agreement
Microsoft has sent "voluntary departure" offers to approximately 60,000 employees, about 27% of its global workforce, with those accepting receiving compensation. SpaceX and Apollo Global Management have reached a financing agreement of approximately $40 billion, under which an Apollo subsidiary will purchase Nvidia AI chips and accompanying server hardware and lease them to SpaceX. Anthropic has submitted an IPO application to the SEC, with revenue in the first half of 2026 growing 14-fold year-over-year to $16.3 billion, about 80% of which comes from usage-based API revenue.
heise online
Cloudflare CEO Says php2shell Is Just the Beginning: AI Finding Vulnerabilities Will Bring Years of Security Crisis
Cloudflare CEO Matthew Prince told Reuters that the recently disclosed php2shell and Broccoli2Shell vulnerabilities are just the beginning, because more and more people are using AI to find security vulnerabilities; he expects the coming years to feel like the sky is falling every week. Cloudflare was one of the first companies to detect and block php2shell attacks, and Prince said he knows of a series of severe vulnerabilities in other critical software components but did not disclose the project names. VulnCheck's Patrick Garrity and secuvera's Tobias Glemser also agree that the interval between vulnerability discovery and exploitation is steadily shrinking, with the latter advocating continuous maintenance of software.
Oct 26
cnBeta
Cloudflare warns that AI is accelerating vulnerability discovery, and the internet may face years of security turbulence
Cloudflare's Matthew Prince warned that AI is dramatically accelerating the discovery of software vulnerabilities, and the internet may remain in a state of frequent security crises for the next few years. Citing a recent major PHP vulnerability as an example, he said Cloudflare knows of other critical software with equally serious problems that, once disclosed, could trigger another global remediation effort. Wiz Research said advanced AI models played a key role in the PHP vulnerability research, enabling the simultaneous deployment of multiple AI agents to analyze codebases and compressing work that previously took weeks into hours; data from the EFF and VulnCheck also shows a clear increase in the number of vulnerabilities discovered with AI assistance.
cnBetaRelated discussion
cnBeta joined this discussion
This post contributes to heat; it is not a formal report or confirmed fact.
TechSpot
Cloudflare CEO: AI will keep unearthing critical software vulnerabilities for years
Cloudflare CEO Matthew Prince told Reuters that the PHP vulnerability that forced government websites, GOG and other sites offline last week was only the beginning; the company already knows of several other severe vulnerabilities in other critical software, and AI tools will keep finding new ones for years to come. He believes large language models have greatly lowered the time and skill threshold needed to discover and exploit severe vulnerabilities, and expects a similar sense of crisis every week in the coming years. EFF says vulnerabilities found in October alone account for 3% of all historical records, and those found this year account for nearly a quarter of all known security issues.
Heat trend for this story
- Current
- 11
- Period peak
- 19 Oct 26 02:00
- 24-hour change
- —
Move the pointer or select the chart to inspect hourly heat. Use the left and right arrow keys with a keyboard.