‘Every single week it’s going to feel like the sky is falling’: Cloudflare CEO says strap in for ‘a couple years’ of AI-powered internet security mayhem

A critical security vulnerability in PHP—a scripting language powering approximately 70% of the world’s websites—caused widespread internet disruption this week, forcing government websites, game marketplaces, and other major services offline. The incident revealed dangerous flaws in foundational internet infrastructure that could expose popular destinations to cyberattacks.

Cloudflare CEO Matt Zadeh warned that this PHP crisis is merely the first of many similar incidents expected over the next couple of years. According to the executive, internet-facing organizations should anticipate weekly security incidents of comparable severity, creating a sustained period of instability and disruption. The CEO’s comments suggest that escalating AI-powered security threats will make such outages increasingly frequent and consequential.

The incident highlights the vulnerability created when such a large proportion of the web depends on a single technology. PHP’s ubiquity means security flaws have outsized impact, cascading rapidly across the digital ecosystem and affecting diverse services simultaneously. As security threats grow more sophisticated and AI tools enable faster exploitation of vulnerabilities, the internet infrastructure that underpins modern digital services faces mounting pressure. Industry stakeholders are being advised to prepare for a prolonged period of heightened security volatility.

Sources