23 October 2026

AI-found software flaws leaked early, forcing some sites offline for patching

First reported

Transformer ran this on .

  • AI tools found security flaws in PHP and Node.js, two widely used software platforms.
  • Details of those flaws leaked before fixes were ready, so some government sites and the Internet Archive went offline to patch.
  • The newsletter Transformer argues defenders mostly came out ahead in this episode.

How it was covered

TransformerShakeel Hashim

PHP and Node.js vulnerabilities, early leak and site takedowns, defender advantage, open-weight Chinese models, expected rise in findings