US and European websites go offline over security concerns
Cybersecurity firm WIZ used artificial intelligence to discover a critical vulnerability in PHP—the language powering more than two-thirds of websites worldwide—briefly taking government agencies in Finland, the Netherlands and France, as well as Wikipedia and the BBC, offline. On the same day, Trump envoy Steve Witkoff met President Putin in St. Petersburg, but the talks produced no concrete progress toward a Russia-Ukraine ceasefire. An English translation of a memoir by imprisoned Baháʼí leader Mahvash Sabet, based on writings she secretly smuggled out of prison over seven years, has also been published.
Listen to this episode Go to the show page
What this episode answers
What is the PHP vulnerability that was discovered, and why did so many sites go offline?
WIZ found a critical flaw in PHP—the language underpinning more than two-thirds of websites and apps—and governments immediately advised patching; organisations that could not apply the fix in time voluntarily took their sites offline, including government agencies in Finland, the Netherlands and France, Wikipedia and the BBC. WIZ has rated it the most severe vulnerability ever discovered by AI.
How will the AI-driven cybersecurity threat evolve going forward?
AI is now simultaneously raising the offensive capabilities of bad actors and the defensive capabilities of researchers; while well-intentioned security researchers can use AI to uncover flaws that went unnoticed for decades, the same technology can be used by malicious actors to bring down servers and steal data. There is little individuals can do right now, and the primary responsibility for response lies with site operators.
What was actually agreed in the meeting between Trump's envoy and Putin?
No concrete agreement was reached; the talks produced only the possibility of restarting technical-level US-Russia-Ukraine trilateral discussions in November. Putin released 74-year-old former American teacher Steven Havard as a goodwill gesture before the meeting, but no ceasefire timeline was established.
What are the fundamental barriers preventing progress in Russia-Ukraine ceasefire negotiations?
The core war aims are irreconcilable: Ukraine insists on maintaining its current borders while Russia demands annexation of the entire Donbas. NATO membership and post-ceasefire security arrangements involving NATO troops or peacekeeping forces are also conditions Russia cannot accept, and even a partial ceasefire over energy infrastructure broke down when Russia continued attacking Ukraine's electricity grid.
How did Mahvash Sabet smuggle her writings out of prison?
When she had access to a pen, Sabet wrote on newspaper margins and thin scraps of tissue paper, hid them in her bra and clothing, and lay on top of the papers to keep them flat; after leaving solitary confinement, fellow detainees sewed the pages into the hems of dresses and coats and carried them out. She gathered fragments over seven years and transcribed them into a memoir after a temporary release in 2017.
AI Discovers Critical PHP Vulnerability — Government and Media Sites Briefly Knocked Offline
Cybersecurity firm WIZ used artificial intelligence to uncover a critical vulnerability in PHP, the programming language that underpins more than two-thirds of websites and applications worldwide. The impact was sweeping: government agencies in Finland, the Netherlands and France, along with Wikipedia and the BBC, voluntarily took their sites offline to buy time to apply patches. WIZ has described the flaw as the most severe vulnerability ever discovered by AI.
BBC technology reporter Lily Jamali, reporting from San Francisco, explained how events unfolded. Governments issued urgent advice to apply the patch immediately and told organisations that could not do so in time to take their sites down voluntarily. Because many sites do not publicly disclose whether they run PHP, the full extent of the exposure has been difficult to gauge.
AI Is Redrawing the Map of Cyber Threats
Jamali identified AI as the defining theme of this story. Since around April and May of this year, major American AI companies have repeatedly stated that their models' hacking capabilities have been advancing rapidly. Well-intentioned researchers armed with AI can now find flaws that went unnoticed for decades. But the same technology is equally available to bad actors who want to bring down servers and steal data.
Options for individuals remain limited for the time being. Japan's government urged anyone operating a PHP-powered site to check their status, but the practical burden of response falls on site operators. The UK government called on all organisations to understand their own exposure and take the strongest possible protective measures.
Trump's Envoy Meets Putin — 'Possibility' of Progress, No Concrete Deal
Trump's special envoy Steve Witkoff met President Vladimir Putin at the Konstantinovsky Palace in St. Petersburg. Before the meeting, Putin released Steven Havard, a 74-year-old former American teacher held in Russia, as a goodwill gesture. Witkoff described the talks as "constructive," and Trump said a ceasefire was "closer than ever," though he offered no specific evidence to support that claim.
In substantive terms, the meeting produced only the possibility of restarting technical-level trilateral talks between the US, Russia and Ukraine in November. BBC Russia editor Steve Rosenberg reported that there is no sign of the fighting ending. Meanwhile, Trump has suspended some sanctions on Russia and agreed to purchase Russian diesel.
According to BBC North America chief correspondent Gary O'Donoghue, the structural reasons why a ceasefire remains out of reach are straightforward. Ukraine insists on maintaining its current borders; Russia insists on annexing the entire Donbas. NATO membership for Ukraine, and post-ceasefire security arrangements involving NATO troops or peacekeeping forces, are conditions Russia cannot accept. A partial ceasefire over energy infrastructure also collapsed: despite Trump pressing Ukraine strongly to stop striking Russian refineries, Russia continued attacking Ukraine's electricity grid, prompting Ukraine to resume its own strikes.
For Trump, rising domestic fuel prices ahead of the midterm elections add another layer of pressure, meaning his conciliatory posture toward Russia is shaped by a complex mix of geopolitics and domestic politics.
A Memoir Smuggled Out of an Iranian Prison
The memoir *Open Wide the Doors* by Baháʼí poet and writer Mahvash Sabet has been published in an English translation by Bahiyyih Nakhjavani. Sabet has spent most of the past fifteen years in prison; her formal release date is 2032. She is currently on a temporary medical release for heart surgery but can be recalled to prison at any time.
The Baháʼí Faith was founded in Iran in the nineteenth century and has faced repeated persecution by successive governments. Over the decades its followers have been falsely accused of spying — for Russia in the late nineteenth century, then for Britain, then for the United States, and more recently for Zionist Israel. After the Islamic Revolution, the Faith's elected governing body was dissolved, and members were systematically denied basic rights covering employment, education and burial. Sabet served as secretary of a group called Yáránán-i Írán (Friends of Iran), which attended to the everyday needs of the Baháʼí community — a role cited as grounds for her detention.
The methods by which she preserved her writing and got it out are remarkable. When she had access to a pen, she wrote on newspaper margins and thin scraps of tissue paper, hid them in her bra and clothing, and lay on top of the papers to keep them flat. After leaving solitary confinement, fellow detainees helped by sewing the pages into the hems of dresses and coats and carrying them out. Over seven years she accumulated these fragments, then transcribed them into a single book after a temporary release in 2017. Nakhjavani says Sabet "maintained her composure and humour even in that dark, Kafkaesque world."
Takeaways
- AI discovered the most severe PHP vulnerability on record, briefly knocking government and media sites in multiple countries offline and marking a new phase in which AI simultaneously empowers both defenders and attackers in cybersecurity.
- Trump envoy Steve Witkoff's meeting with Putin in St. Petersburg yielded no concrete ceasefire agreement, with the core gap between Ukraine's insistence on its current borders and Russia's demand for the entire Donbas remaining unbridged.
- An English translation of Baháʼí leader Mahvash Sabet's memoir — based on writings secretly smuggled out of an Iranian prison over seven years — has been published, shining a global spotlight on Iran's systematic persecution of the faith.
This article is edited from a machine transcript of the first 30 minutes of the episode. It is not an official summary — please listen to the episode itself.