Why AI could threaten much of the world's digital infrastructure Share Why AI could threaten much of the world's digital infrastructure on social media Earlier this month, authorities worldwide urged website administrators to execute emergency updates after a nonprofit programming foundation flagged critical security flaws that could allow hackers to breach systems. Government and corporate websites briefly went offline to patch the vulnerabilities, nicknamed PHP2Shell, which were discovered by independent cybersecurity experts using artificial intelligence (AI). They had gone unnoticed, however, because it would have been too complicated for humans to exploit them without the use of advanced AI. But cybersecurity experts, as well as those maintaining important software, say PHP2Shell could be the first in a deluge of security flaws exposed by emerging AI. They say much of the world's most critical digital infrastructure is maintained by volunteers, who often lack the resources and time to respond to newly discovered threats.

The Dell Laptop Buying Guide 2026: Which XPS or Alienware Laptop Should You Buy? The Dell Laptop Buying Guide UK: Which Dell Laptop Should You Buy? When you purchase through links in our articles, we may earn a small commission. Firefox 159 also puts a password tool in the sidebar by default and adds Smart Window, which watches sites for changes. Firefox 159 has been released for Windows, macOS, Linux, and Android.

'Black October': cybersecurity experts sound the alarm over new era of AI-enabled hacking After discovery of severe bug in the PHP programming language, executives warn of'vulnerability tsunami' Leaders in cybersecurity are sounding the alarm after the discovery of a major vulnerability this week. They are predicting that artificial intelligence tools will expose more fundamental weaknesses in global internet infrastructure in the months to come. "I no longer think we're going to be able to patch all bugs," said Sam Altman on Thursday evening, joining the chorus of executives. In the midst of what's being called "Black October", for which researchers used AI to help identify critical flaws in a coding language that is used across millions of websites and may have been unpatched for years, tech executives are warning about the ways AI will be used both to identify and exploit security vulnerabilities at an unprecedented scale and pace. The next few months will see a "vulnerability tsunami", according to Jason Clinton, Anthropic's deputy chief information security officer.

Trending Now Mashable Selects Look Up Mashable's Best: E-readers, robovacs, laptops, earbuds, smart home and more Getting Technical with Mashable Gift Ideas For Everyone On Your List Say More Versus In My Bag Mashable @Home Top creators, ranked Creator Playbook All Series Wednesday morning was not a good one for the Internet Archive. Users are also reporting problems with Wikipedia. Alex Perry is a tech reporter at Mashable who primarily covers video games and consumer tech. Alex has spent most of the last decade reviewing games, smartphones, headphones, and laptops, and he doesn't plan on stopping anytime soon. He is also a Pisces, a cat lover, and a Kansas City sports fan.

PCWorld reports that Google Chrome 156 introduces a new Media understanding feature, allowing users to ask Gemini AI to summarize or explain videos and audio content directly in the browser.

PCWorld reports that Mozilla has released Firefox 158, introducing an AI-powered Smart Windows feature for automatic form filling and adding support for the efficient JPEG XL image format. The update patches 77 security flaws, including 30 high-risk vulnerabilities, with 24 capable of allowing malicious code execution and eight potentially enabling attackers to escape the browser sandbox. Users are advised to update Firefox immediately to close these dangerous security gaps. Firefox 158 is out for Windows, macOS, Linux, and Android. This version brings improved PDF support, the ability to fill forms with the help of "AI," as well as fixes for over 75 security vulnerabilities. Updates are also available for Firefox ESR versions. Firefox 159's release is scheduled for October 27th, 2026.

PCWorld reports that Microsoft set a record by fixing 1,416 security vulnerabilities in its October 2026 Patch Tuesday update, surpassing any previous single-month total. The update addresses 85 critical flaws, including 67 remote code execution vulnerabilities, a dangerous SharePoint elevation of privilege issue, and one actively exploited Windows Shell flaw. Windows and Office users are urged to apply these updates immediately to avoid serious cyberattacks and unauthorized system access. Yesterday was October Patch Tuesday, and Microsoft's security updates addressed 1,416 new vulnerabilities. Not only is that another record broken, but it's also the first time over 1,000 flaws were fixed in a single month.

PCWorld notes that Firefox 157 introduces the Nova redesign, the browser's biggest visual overhaul in years, featuring rounded corners, subtle color gradients, and 12 unique themes with light and dark modes. A new Compact Mode helps users save screen space, making Firefox more practical for smaller displays. Mozilla also released ESR security updates fixing dozens of vulnerabilities, with older system support continuing until March 2027. Firefox 157 is out for Windows, macOS, Linux, and Android and the biggest change in this version is the new Nova design, which brings a more modern look to the browser. Mozilla has also fixed over 70 security vulnerabilities, and updates are also available for the Firefox ESR versions. The release of Firefox 158 is scheduled for October 13th, 2026.

PCWorld reports that Google has released Chrome 154, fixing 108 security vulnerabilities, including 11 classified as critical risks. The update is available across Windows, macOS, Linux, Android, and iOS, with external researchers helping identify 32 of the patched issues. Users are strongly advised to update Chrome immediately via the Help menu to protect against these serious security flaws.

PCWorld reports that Google has patched 42 security vulnerabilities in Chrome, with three classified as critical risks affecting Windows, macOS, Linux, Android, and iOS users. Many of the fixes address use-after-free memory flaws, and while none have been exploited yet, the risks are serious enough to warrant immediate action. Users should update Chrome now via the About Google Chrome menu to stay protected.