INTEL: Internet security under threat from critical flaws and AI cyberattacks

A wave of major cybersecurity threats has raised concerns about the security of critical internet infrastructure. Multiple incidents disclosed in October 2026 have affected government services, software platforms, financial institutions and artificial intelligence systems.

The developments include critical vulnerabilities in PHP and GitLab, compromised website security certificates, AI-powered attacks targeting over 1,200 websites, malicious code distributed through an AI software package and exposed customer records at India’s largest bank.

Although these incidents are unrelated, their emergence within a short period highlights growing risks across essential digital services.

Critical PHP vulnerabilities force European websites offline

Two serious vulnerabilities in PHP triggered emergency cybersecurity warnings and precautionary website shutdowns across Europe.

PHP is a widely used programming language powering platforms such as WordPress and millions of websites worldwide.

The security flaws could allow attackers to execute malicious code on vulnerable servers.

Government services and other websites in several European countries were temporarily taken offline while administrators prepared security updates.

PHP developers released emergency patches on October 21. Authorities urged affected organizations to update their systems immediately.

GitLab discloses maximum-severity security flaw

GitLab issued security updates addressing a critical vulnerability rated 10 out of 10 on the Common Vulnerability Scoring System.

The flaw could allow unauthorized attackers to execute malicious code on certain vulnerable GitLab servers.

Organizations operating affected self-managed installations were advised to install the latest security releases.

The vulnerability raised particular concerns because GitLab is widely used to develop and maintain software.

Eight compromised certificates expose website security risks

Google disclosed that eight security certificates issued by Indian provider eMudhra had been compromised due to weaknesses in their private keys.

The vulnerability could allow attackers to create fraudulent certificates that impersonate legitimate websites.

On systems that continued trusting the affected certificates, attackers positioned to intercept internet connections could potentially access or modify encrypted communications.

Google, Mozilla and other major technology companies responded by blocking the compromised certificates.

Most users of mainstream browsers received automatic protections. Certain applications and servers may still require security updates.

AI-powered hackers target over 1,200 websites

A separate investigation revealed how cybercriminals used artificial intelligence agents to automate attacks against business websites.

According to Reuters, AI-powered systems attempted intrusions against more than 1,200 websites and successfully breached sites belonging to over 100 companies.

The agents were capable of identifying vulnerabilities and carrying out attacks with limited direct human involvement.

The findings highlight how artificial intelligence can increase the speed and scale of cybercrime.

Malware discovered in LiteLLM AI software package

Security researchers also identified malicious code distributed through a compromised version of LiteLLM, a software package used to connect applications with AI models.

The malicious release was designed to collect sensitive information such as passwords and access credentials.

The affected package was removed from distribution. Organizations that installed it were advised to investigate potential exposure and replace compromised credentials.

The incident demonstrates the risks of malicious software entering development environments through otherwise legitimate tools.

State Bank of India investigates exposed customer records

State Bank of India disclosed that 3,897 customer records containing personal information had been identified within a larger dataset found on the dark web.

The exposed information included customer names and contact details alongside other personal records.

The bank initiated an investigation to determine the source and extent of the exposure.

SBI stated that the incident had not materially affected its core business operations or financial performance.

Growing cybersecurity threats raise global concerns

The incidents expose security weaknesses across several important layers of the digital economy.

Critical software vulnerabilities can disrupt government services and businesses. Compromised security certificates threaten online authentication. Malicious software can expose sensitive credentials and AI-powered tools are enabling attackers to operate on a much larger scale.

Cybersecurity authorities continue to recommend prompt software updates and stronger protections for sensitive systems.

From government services to banking and AI infrastructure, the scale of these threats raises serious concerns about the security of the systems powering the internet.