{"id":148639,"date":"2026-11-09T07:46:00","date_gmt":"2026-11-09T12:46:00","guid":{"rendered":"https:\/\/kendallharmon.net\/?p=148639"},"modified":"2026-11-09T17:48:43","modified_gmt":"2026-11-09T22:48:43","slug":"wsj-ai-saves-the-day-and-could-bring-doom-tomorrow","status":"publish","type":"post","link":"https:\/\/kendallharmon.net\/?p=148639","title":{"rendered":"(WSJ) AI Saves the Day\u2014and Could Bring Doom Tomorrow"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The National Security Agency told organizations that if they couldn\u2019t fix their websites immediately, they should take them offline. Not patch carefully. Not watch for suspicious activity. Pull the plug, according to the <a href=\"https:\/\/www.nsa.gov\/press-room\/press-releases-statements\/press-release-view\/article\/4630238\/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities\/\" target=\"_blank\" rel=\"noopener\">NSA\u2019s Oct. 21 advisory<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The flaws were in PHP, the programming language behind most of the world\u2019s websites, and they would let anyone run commands on a server without a password. Germany, France, Belgium, the Netherlands, Finland and the Czech Republic temporarily took down some government sites.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">How serious was it? The prime minister of Japan <a href=\"https:\/\/x.com\/takaichi_sanae\/status\/2112890642590564386\" target=\"_blank\" rel=\"noopener\">went on X.com<\/a> to tell her country to get ready to patch. I have spent two decades in this business, including at the Pentagon and now at Vanderbilt University, where my lab specializes in cybersecurity. I have never seen a head of government issue a patch notice like this. It won\u2019t be the last.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here is what should worry you: This was pretty much the best-case scenario. The flaws were found with the help of artificial-intelligence models, including <a href=\"https:\/\/www.wsj.com\/topics\/subject\/openai\" target=\"_blank\" rel=\"noopener\">OpenAI<\/a>\u2019s, and handled the way we would want. They were reported quietly in August to PHP\u2019s maintainers, who spent two months working with OpenAI and outside security researchers on a fix before releasing it publicly. OpenAI says that, to its knowledge, AI found these flaws before attackers did.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is luck, not a system&#8230;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.wsj.com\/opinion\/ai-saves-the-dayand-could-bring-doom-tomorrow-b1afdfec\">Read it all<\/a>.<\/p><blockquote class=\"twitter-tweet\"><p lang=\"en\" dir=\"ltr\">AI saves the day\u2014and could bring doom tomorrow. OpenAI identified a bug in the web and reported it. Will the next one be found by bad guys with a Chinese open model? asks Brett Goldstein\nhttps:\/\/t.co\/bo3vtS8SYq<\/p>&mdash; Wall Street Journal Opinion (@WSJopinion) <a href=\"https:\/\/x.com\/WSJopinion\/status\/2119792143115907103?ref_src=twsrc%5Etfw\">November 9, 2026<\/a><\/blockquote>\n<script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script>\n","protected":false},"excerpt":{"rendered":"<p>The National Security Agency told organizations that if they couldn\u2019t fix their websites immediately, they should take them offline. Not patch carefully. Not watch for suspicious activity. Pull the plug, according to the NSA\u2019s Oct. 21 advisory. The flaws were<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/kendallharmon.net\/?p=148639\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":794,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[94,589,95],"tags":[],"class_list":["post-148639","post","type-post","status-publish","format-standard","hentry","category-blogging-the-internet","category-corporationscorporate-life","category-science-technology"],"_links":{"self":[{"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/posts\/148639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/users\/794"}],"replies":[{"embeddable":true,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=148639"}],"version-history":[{"count":3,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/posts\/148639\/revisions"}],"predecessor-version":[{"id":148642,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=\/wp\/v2\/posts\/148639\/revisions\/148642"}],"wp:attachment":[{"href":"https:\/\/kendallharmon.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=148639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=148639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kendallharmon.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=148639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}