Researchers use AI to find hidden flaws in PHP, sparking worldwide security check

Fact-check index: 58/100 — The two core factual claims (AI-discovered PHP flaws triggering a global security scramble, and Amazon reporting pre-disclosure attacks) are directly supported by the cited BBC articles, but the added interpretive claims about attacker motives, PHP's infrastructure role, and unresolved questions go beyond what the source snippets establish.

• Security researchers used AI to uncover long-hidden flaws in PHP, triggering a global response — Matches BBC article c3qjnwye0ep5o: 'AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.'
• Governments and companies worldwide are racing to check their exposure — Matches BBC headline/lede: 'Governments working to identify exposure after global cyber-security warning' and 'Governments and companies are scrambling to protect their websites.'
• Amazon says it had already faced attacks exploiting the flaws before the warning was made public — Directly matches BBC article cmx23d0k57d3o: 'Amazon says it experienced attacks before the warning was made public.'
• This raises fears that malicious actors found the bugs first — A reasonable inference from Amazon's pre-disclosure attack claim, but not a stated fact in the provided source snippets; it's the article's own framing/interpretation.
• PHP powers core government and corporate infrastructure worldwide, making this a cross-border issue — Consistent with the general thrust of both source headlines (global scramble, governments/companies affected) but the specific framing ('core... infrastructure') isn't verbatim in the provided excerpts.
• Unclear so far: how long attackers had access before the warning, and how many organisations have patched — Not addressed in either source excerpt provided; appears to be the article's own analytical addition rather than sourced information.