# AI-Detected PHP Flaws Knock Sega, ANA, and MUFG Offline, Sparking Warnings Across Asia > Two newly discovered vulnerabilities in PHP, the programming language running on roughly 70% of websites with an identifiable server-side language, forced Sega, All Nippon Airways, and MUFG Bank to suspend parts of their online services this week, as governments across Asia urged companies to patch immediately. - Source: South East Money - Canonical URL: https://southeastmoney.id/article/ai-detected-php-flaws-knock-sega-ana-and-mufg-offline-sparking-warnings-across-asia - Author: Tim - Section: Tech - Published: 2026-10-22T10:20:41.133Z - Updated: 2026-10-22T10:20:41.133Z - Tags: PHP, cybersecurity, Sega, All Nippon Airways, MUFG Bank, Japan, Asia, AI security --- Two serious vulnerabilities uncovered in PHP, one of the internet's most widely used programming languages, disrupted online services at some of Japan's best-known companies this week, prompting authorities across Asia to push for urgent security updates. The flaws were identified with the help of AI-assisted security tooling, underscoring how both the discovery and the defense of modern web infrastructure increasingly run through automated systems rather than manual review alone. ## Why a PHP flaw travels so far, so fast PHP's reach is what makes any flaw in it a regional event rather than a niche technical story. The language powers roughly 70% of websites whose server-side programming language can be identified, a dominance built up over two decades of use in everything from small business sites to the back-end systems of major corporations. A critical vulnerability at that scale does not stay contained to a single company or sector; it becomes a race against time for every organization running affected PHP versions, which is effectively a large share of the web. ## Household names forced offline By Thursday, the disruption had reached deep into corporate Japan. Gaming company Sega, airline All Nippon Airways, and MUFG Bank all suspended their websites or parts of their online services as a precaution, a response that speaks to how seriously each organization treated the exposure rather than simply patching quietly in the background. Taking down airline booking systems or banking portals, even briefly, carries real operational and reputational cost, which makes the decision to do so a strong signal of how urgent the threat was judged to be. ## Governments push for immediate patching Authorities across the region responded with calls for companies to apply security updates without delay, treating the vulnerabilities as the kind of flaw that attackers could weaponize quickly once details became public. That urgency reflects a familiar pattern in web security: the period right after a serious vulnerability is disclosed is often the most dangerous window, since defenders and attackers are racing on the same information at the same time. ## AI's growing role on both sides of the fight The fact that these flaws were surfaced through AI-assisted detection fits a broader shift already underway in cybersecurity, where automated tools scan far more code, far faster, than human researchers alone ever could. That is good news when it means critical bugs get caught before attackers find them first, but it also raises the stakes: the same kind of tooling that helps defenders discover flaws early can, in other hands, be turned toward finding and exploiting them just as quickly. ## What comes next for exposed businesses For companies across Asia running PHP-based systems, the immediate task is straightforward even if the scale is daunting: identify every exposed system, apply the relevant patches, and confirm services are safe before fully restoring them. The longer-term question is whether this episode pushes more organizations to invest in the kind of continuous, AI-assisted scanning that caught these flaws in the first place, rather than relying on the slower cycle of periodic manual audits that has defined web security for most of PHP's history. --- Originally published by South East Money. Free to cite with attribution and a link to https://southeastmoney.id/article/ai-detected-php-flaws-knock-sega-ana-and-mufg-offline-sparking-warnings-across-asia.