Japan turns to AI as critical PHP flaws disrupt online services

Japan plans to use artificial intelligence (AI) to simulate cyberattacks and identify weaknesses in technology systems as authorities and businesses respond to critical security vulnerabilities in the widely used PHP programming language, Reuters reported on October 23.

The vulnerabilities have triggered emergency security measures across Japan, with companies and government agencies temporarily suspending some online services while assessing their exposure and applying security updates.

Major organisations, including SoftBank, Nomura, All Nippon Airways (ANA) and East Japan Railway, have taken precautionary measures. Government bodies, including the Finance Ministry and the Meteorological Agency, have also faced disruptions to some online operations.

Japan’s Industry Minister Ryosei Akazawa has emphasised the need to adopt an attacker’s perspective and use AI to identify potential weaknesses before malicious actors can exploit them.

The incident highlights the growing role of AI in cybersecurity. While AI can help security researchers discover vulnerabilities and strengthen digital defences, it can also enable attackers to identify and exploit weaknesses more efficiently.

PHP developers have released urgent security updates addressing the vulnerabilities, which had remained undiscovered for years before being identified through AI-assisted analysis. Organisations running affected systems have been urged to apply the relevant patches and take
protective measures.

The disruption demonstrates how vulnerabilities in widely used software can affect businesses, public services and government infrastructure across multiple countries. It also highlights the importance of timely security updates, continuous monitoring and proactive testing of digital
systems.

Japan’s proposed AI-driven approach reflects a broader shift towards using automated tools to test cyber defences and prepare organisations for increasingly sophisticated attacks.