{"id":23329,"date":"2026-10-25T20:50:28","date_gmt":"2026-10-25T20:50:28","guid":{"rendered":"https:\/\/8657085.xyz\/?p=23329"},"modified":"2026-10-25T20:50:28","modified_gmt":"2026-10-25T20:50:28","slug":"tech-debt-coming-due-ai-found-flaw-signals-chaos-ahead","status":"publish","type":"post","link":"https:\/\/8657085.xyz\/?p=23329","title":{"rendered":"&#8216;Tech debt coming due&#8217;: AI-found flaw signals chaos ahead"},"content":{"rendered":"<p> <div style=\"display: grid; grid-template-columns: 300px 160px; gap: 2px; width: 460px; background: #eee; padding: 2px;\">\r\n\r\n  <!-- \u6574\u884c\u5bbd\u5e7f\u544a -->\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876674\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"grid-column: 1\/-1; width: 460px; height: 90px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876676\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u7ad6\u6392 -->\r\n  <div style=\"height: 250px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876672\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  <div style=\"height: 500px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876680\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u6469\u5929\u697c\uff08\u548c\u5de6\u4fa7\u5b8c\u5168\u5bf9\u9f50\uff09 -->\r\n  <div style=\"grid-row: 3\/5; height: 750px; background: #ccc; display: grid; place-items: center;\">\r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e2\" data-zoneid=\"5876678\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n  <\/div>\r\n  \r\n  <script async type=\"application\/javascript\" src=\"https:\/\/a.magsrv.com\/ad-provider.js\"><\/script> \r\n <ins class=\"eas6a97888e6\" data-zoneid=\"5876682\"><\/ins> \r\n <script>(AdProvider = window.AdProvider || []).push({\"serve\": {}});<\/script>\r\n<\/div><br \/>\n<\/p>\n<div style=\"padding-right:0;padding-left:0\">\n<p>Companies and government agencies rushed this week to patch two critical flaws in PHP, the programming language that runs a large share of the world\u2019s websites.<\/p>\n<p>The vulnerability to potential hackers was found by using a powerful\u00a0model from OpenAI in one of the most high-profile demonstration of AI\u2019s cyber capabilities.<\/p>\n<p>AFP spoke with Michael Daniel, president of the Cyber Threat Alliance and a former White House cybersecurity coordinator under former US president Barack Obama, about what the episode means as AI tools find software flaws faster than ever.\u00a0<\/p>\n<p>The interview has been edited for length and clarity.<\/p>\n<p>Q: What does the PHP episode tell us?<\/p>\n<p>A: This is the beginning of a pretty chaotic period, given the abilities of the advanced models. I\u2019ve been saying for years that the logical conclusion of these AI models being able to find vulnerabilities at speed and at scale is that there\u2019s going to be a flood of these vulnerabilities.\u00a0<\/p>\n<p>Rob Joyce [former cybersecurity director at the US National Security Agency] has referred to it as the great cleansing forest fire of old software. I\u2019ve talked about our tech debt coming due.<\/p>\n<p>The incentives have been for people to keep software as long as possible, and we don\u2019t really factor these risks into the cost of having the software. You\u2019re not incurring a direct cost on your books for this old software, but in reality you are, only it\u2019s an implicit cost until something like this happens.<\/p>\n<p>Q: What should organizations be doing?<\/p>\n<p>A: Preparing to get your software updated, be prepared to keep it updated, and be prepared to implement patches when they come out.\u00a0<\/p>\n<p>There\u2019s going to be a flood of vulnerabilities, a flood of patches and a flood of mitigations, and not all of them will be created equal.\u00a0<\/p>\n<p>For a lot of smaller organizations that don\u2019t have a lot of internal capacity, what you\u2019ve got to do is shift your organization to be able to accept the vendor updates as fast as you can.<\/p>\n<p>Q: Is every flaw dangerous?<\/p>\n<p>A: Historically, the exploitation rate for vulnerabilities has been five or six percent, and there\u2019s no indication that number is going up. But now when bad guys exploit a vulnerability, they\u2019re able to do so much more quickly.\u00a0<\/p>\n<p>It used to take a month or two for a proof of concept to come out, and then another month or two for it to show up in exploit kits (used by bad actors). That\u2019s now measured in hours or days.<\/p>\n<p>Q: What does that mean for large companies?<\/p>\n<p>A: Most businesses essentially ran a zero-risk tolerance for breaking things, so they would test the hell out of a patch before they put it into production. Now they don\u2019t have that time.\u00a0<\/p>\n<p>If the risk of breaking something by putting this patch into place is one percent, but the risk of being attacked could cost me 50 million dollars\u2026now I\u2019ve got an interesting trade-off.<\/p>\n<p>Q: Are advanced AI tools reliable at finding real flaws?<\/p>\n<p>A: There\u2019s a lot of noise. The PHP one is a prime example of a real one, but there\u2019s an awful lot out there that are either not real or are on software that\u2019s never exposed to the internet. We\u2019ve got to improve our triage system.<\/p>\n<p>Q: Where does this lead us in two or three years?<\/p>\n<p>A: We\u2019re going to turn these AI tools on software that hasn\u2019t been deployed yet, so one would hope we start to deploy software that has fewer vulnerabilities to begin with. You burn out all the old stuff, and it makes way for new growth that\u2019s more secure from the beginning.\u00a0<\/p>\n<p>It\u2019s not like this solves our cybersecurity problem, but it does change the nature of it going forward.<\/p>\n<\/div>\n<p><!-- \u603b\u5bb9\u5668\uff1a\u6700\u5927\u5bbd908px Grid\u7d27\u51d1\u5e03\u5c40 -->\r\n<div style=\"display: grid; grid-template-columns: 728px 160px; gap:2px; width:908px; background:#eee; padding:2px;\">\r\n\r\n  <!-- \u901a\u680f\u9876\u90e8\uff1a\u6700\u5927\u6a2a\u5e45 908x258 \u8de8\u6574\u884c -->\r\n  <div style=\"grid-column:1\/-1; height:258px; background:#ff6b6b; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114307\" data-width=\"908\" data-height=\"258\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114307});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u7b2c\u4e8c\u901a\u680f\uff1a728\u00d790 \u901a\u680f -->\r\n  <div style=\"grid-column:1\/-1; height:90px; background:#4ecdc4; display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114300\" data-width=\"728\" data-height=\"90\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114300});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n  <!-- \u5de6\u4fa7\u4e3b\u680f\uff1a\u591a\u5e7f\u544a\u5806\u53e0 -->\r\n  <div style=\"display:grid; gap:2px;\">\r\n    <div style=\"height:60px; background:#45b7d1; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114308\" data-width=\"468\" data-height=\"60\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114308});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ffe066; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114299\" data-width=\"300\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114299});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:250px; background:#ff9ecd; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114305\" data-width=\"250\" data-height=\"250\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114305});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:139px; background:#c792ea; display:grid; place-items:center;\">\r\n\t<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114302\" data-width=\"133\" data-height=\"139\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114302});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n    <div style=\"height:125px; background:#91e7ac; display:grid; place-items:center;\">\r\n\t\r\n<!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114303\" data-width=\"125\" data-height=\"125\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114303});<\/script>\r\n<!--JuicyAds END-->\r\n\t<\/div>\r\n  <\/div>\r\n\r\n  <!-- \u53f3\u4fa7\u7ad6\u680f\uff1a160\u00d7600 \u6574\u5217\u9ad8\u5e7f\u544a -->\r\n  <div style=\"grid-row:3\/8; height:600px;  display:grid; place-items:center;\">\r\n    <!-- JuicyAds v3.0 -->\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async src=\"https:\/\/poweredby.jads.co\/js\/jads.js\"><\/script>\r\n<ins id=\"1114301\" data-width=\"160\" data-height=\"600\"><\/ins>\r\n<script type=\"text\/javascript\" data-cfasync=\"false\" async>(adsbyjuicy = window.adsbyjuicy || []).push({'adzone':1114301});<\/script>\r\n<!--JuicyAds END-->\r\n  <\/div>\r\n\r\n<\/div><br \/>\n<br \/> &#8216;Tech debt coming due&#8217;: AI-found flaw signals chaos ahead<br \/>\n<br \/>#Tech #debt #coming #due #AIfound #flaw #signals #chaos #ahead<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Companies and government agencies rushed this week to patch two critical flaws in PHP, the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":23330,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[490,17001,1022,909,107,1699,12909,1012,984],"class_list":["post-23329","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-stories","tag-ahead","tag-aifound","tag-chaos","tag-coming","tag-debt","tag-due","tag-flaw","tag-signals","tag-tech"],"featured_image_urls":{"full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",1024,683,false],"thumbnail":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-150x150.jpg",150,150,true],"medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-300x200.jpg",300,200,true],"medium_large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-768x512.jpg",640,427,true],"large":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",640,427,false],"1536x1536":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",1024,683,false],"2048x2048":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",1024,683,false],"covernews-slider-full":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",1024,683,false],"covernews-slider-center":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-800x500.jpg",800,500,true],"covernews-featured":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K.jpg",1024,683,false],"covernews-medium":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-540x340.jpg",540,340,true],"covernews-medium-square":["https:\/\/8657085.xyz\/wp-content\/uploads\/2026\/10\/cybersecurity-hackers-AFP-1K-400x250.jpg",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/8657085.xyz\/?author=1"},"category_info":"<a href=\"https:\/\/8657085.xyz\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/23329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23329"}],"version-history":[{"count":0,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/posts\/23329\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=\/wp\/v2\/media\/23330"}],"wp:attachment":[{"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23329"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=23329"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/8657085.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=23329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}