AI helped a researcher find a loophole he suspected,
then there's standard fix procedures in the public domain Free source code world: timetables to schedule:
- Hackers (*) validate a problem,
- Hackers (*) develop a generic fix, for latest version, then previous versions.
- Private restricted Announcement to trusted developers on various different operating systems to port source fixes to operating systems.
- Build binary fixes & packages, for multiple operating systems & CPUs
- Quietly distribute source & binary fixes widely to download sites
- Wait for all sites to receive updates
- Publicly Announce to please install new version &/or patches,
- Wait maybe a couple of weeks for global sys. admins to install as much as possible
- Publicly announce what the security updates were to fix.
One company cheated & announced prematurely, giving malevolent Crackers (*) a time window to break systems before fixes were in place.
(*) Note the spelling of Hackers & Crackers above.

thephp . foundation / blog / 2026 / 10 / 21 / todays - php - security - release - and - how - were - strengthening - php - security
telegraph . co . uk / gift / f284cfc8931bdbc3: "Fatal flaw in the web triggers global scramble to avert disaster"
https://www.bbc.com/news/articles/cmx23d0k57d3o BBC: UK working to identify exposure after global cyber-security warning.
How many more problems lurk is a good question.
All this & similar code the world relies on is written donated & maintained Free!
Programmers generally find it more fun in their leisure time to write new code &/ or extend other people's code for what they want: rather than to trudge through checking other people's old existing working code, for unlikely scenarios that if they do find & fix, few will thank them for. Checking verges on the day job: hard boring work, hard to motivate people to spend their Free time on it, so Pay Them!.
Governments & companies that benefit could & should sponsor work on that. & it's very cheap to do,
There's various Foundations that governments. companies, & private individuals could give a very little money to, for very cost effective & great public benefit,
Far cheaper than tax payers regularly paying vast sums re=purchasing slightly enhanced Microsoft bloat-ware that repeatedly also requires ever newer hardware

Hackers

Politicians & journalists are so ignorant, they have for decades mis-used the word Hacker, they've now mis-led the public, so Hacker has become a pejorative used by the ignorant masses, politicians & legislators .
Their ignorant & false New-speak pervaded public perception & corrupted even the first sentence definition in en . wikipedia . org / wiki / Hacker "A hacker is most commonly a person who seeks unauthorized access to a computer system or network" - A wikipedia Lie written by ignorants, that propagates & perpetuating a False Truth.
Etymology: Similarly: `Nice' apparently once used to mean `Exact' (eg in calculation or measurement), now means `Pleasant'; `Gay' was similarly hijacked from `Happy' to `Homosexual'. `Hacker' was hijacked too!.
[Code] Hackers are actually ethically good people (white hats) developing & sharing Free code for public benefit, [System] Crackers are evil black hat criminals: breaking, stealing, blackmailing. =
Politicians & journalists, who abuse `Hackers' & mis-lead the public, exhibit pig ignorance.
Castigate [system] Crackers, not [code] Hackers!

PHP & Hackers