Websites Go Offline, Protests in France, Netflix Downsizes
15m 39s
A major cybersecurity flaw in PHP, the software behind 70% of internet websites, has triggered global panic as researchers discovered a vulnerability allowing hackers to take over unsecured servers without passwords or traces. Artificial intelligence was instrumental in uncovering this and similar flaws in legacy systems, revealing a growing threat landscape known as “black October.” As A.I. tools become more proficient at finding vulnerabilities in critical infrastructure like banking and streaming platforms, the race between hackers and defenders intensifies, with urgent patching required across systems. In parallel, France is grappling with widespread protests driven by youth demands for better education and economic fairness, fueling political tension and a surge in far-right support. The government has responded with police curfews and protest route changes, amid fears of escalating violence. Meanwhile, Netflix is facing declining U.S. growth and has announced large-scale layoffs and leadership changes, reflecting broader industry shifts as platforms like TikTok and YouTube gain dominance. The company is now pivoting to reinvigorate its content strategy with new leadership, theatrical releases, and live sports streaming. Experts warn that for the foreseeable future, A.I.-enabled cyber threats will remain a constant challenge, urging individuals and organizations to strengthen their digital defenses.
A.I. found a flaw in the code that runs most internet servers. Businesses and governments around the world scrambled to fix it this week before hackers got there. I'm Aisha Roska. And I'm Scott Simon and this is up first from NPR News. A really bad week in cyber security showed us how much of the internet is vulnerable to powerful A.I. And authorities in France hope to avoid more vandalism and looting this weekend with hordes of police officers while young people in France continue to demand better schools. And mass layoffs at Netflix as viewers turn to YouTube and TikTok. So please stay with us. We've got the news you need to start your weekend. Internet security researchers made a startling discovery two months ago, a vulnerability in the code that most of our servers use. They tried to keep it secret as they raced to fix it, but that didn't stop chaos from spreading across the internet over the past couple of days. Kevin Rus is the co-ops to the new podcast from NPR about A.I. called Machine Gods. Kevin, thanks for being with us. Thanks for having me, Scott. What's happened? Well, we found out this week that there was a big bug in a very important piece of decades old software called PHP. Now for non-technical people, PHP runs on something like 70% of the websites on the internet. And this week we learned it had two flaws that would let someone take over any computer that was running a website without a password and without leaving any fingerprints. So basically imagine that 70% of the doors in the world ran on the same locks, and then we figured out that there was a way to pry open that lock and get in, and we need a bunch of new locks for a bunch of doors. And as I understand it, researchers used A.I. to discover this whole? They did. Yes. And the way I try to discover this whole, the issue is that you need to now patch all of the systems that are running PHP, maybe on an older version, because now we also have these A.I. tools that can quickly exploit vulnerabilities like this. So there's a little bit of a cat and mouse game going on, defenders try to patch the systems before the offenders can get in. So it sounds like you have two or maybe more rival-risk groups, all of the musing A.I., half of them to cause problems, half of them to solve them. Yeah, I hope it's something like only half and half, but what we're seeing now is a much bigger problem because it is not just PHP. These A.I. tools have gotten so good at coding that they have also gotten very good at finding the flaws and bugs in code. And there are a lot of those bugs out there. So some researchers are calling this black October because there have been so many major incidents, cybersecurity threats, just in the last couple of weeks, because of these A.I. tools and what they allow us to discover. And what kind of cybersecurity threads? They're finding vulnerabilities and exploitable holes in very core pieces of software, pieces of software that people have been using for decades, things like bank systems, things like Node.js, Plex, I mean I could go on, but basically these are sort of the big pieces of infrastructure that underlie most of the modern world. And researchers who study these systems are finding a record number of flaws just in the last few months because these A.I. systems are now able to go out and just be very persistent and try and try and try different ways of picking these digital locks until they find the way in. Sounds like it's only going to get worse. Well, the good news is that over the long term, it may get better. We may have much more secure systems once all these bugs have been fixed, but people I talk to in the security industry say they expect that for the next year or two, every week is going to feel like a new crisis as these A.I. tools crawl over more of the internet and try to figure out what's broken or missing or open. What can be done? Well, for individuals, I think now is a great time to check up on your own security, to change your passwords if you haven't rotated them in a while, to use a password manager, take more precautions with things like using unique passwords and updating the software that runs on your devices. I don't think it's time to panic for most people, but if you run a small website or your organization hasn't checked in on its security in a while, this would be a really good time to do that. There are going to be a lot of new pieces of software patches and fixes to these vulnerabilities that need to get installed very quickly. This is crunch time for people who worry about cybersecurity, and this is something that I think a lot of people in the A.I. industry have been expecting to happen, but maybe not this quickly. Kevin Roos is co-host of a new podcast about A.I. called Machine Gods. Kevin, thanks so much for joining us. Thanks for having me. The Machine Gods is available now wherever you get your podcasts. There are some 70,000 police on the streets in French cities today, including elite units to make sure another round of protests don't turn violent. Last week the destruction and looting on the periphery of demonstrations shocked the world. An Emmanuel Macron in his last six months in office has been widely criticized for letting the protests get out of hand. And Paris Eleanor Birgley joins us now from Paris. Eleanor, thanks for being with us. You're welcome, Scott. We can hear the protests around you. What are you seeing? Well, absolutely. There's just like this thick core stream of protesters going down this boulevard. I've kind of pulled back to a side street, but there are just thousands, tens of thousands of people, young, old, a lot of young, but middle-aged, today is actually being led by the yellow vests. That's that white working class movement that dogged Macron, President of Emmanuel Macron during his first term. They and others like union workers and public sector workers have joined the student movement, which began for more teachers and better facilities, but it's ballooned into a much wider movement against the high cost of living and inequalities. Everyone is carrying a lot of signs against Macron. There's a very lively protest. And I spoke with 16-year-old Elouan Kouje, he was out with his mother. He was actually dressed as a big banana, he said, to have fun. Here he is. Everyone in France is angry, and it's today that it shows. And President Macron met with students for the first time. Why did it take so long? Yeah, Macron has been criticized for being absent from this crisis. He flew to the Gulf right after last week's destruction. He was going there to get more oil for the country. He said, but he was absent and he let his prime minister handle things. He's very isolated now. And the more unpopular he has become at home over the last few years, the more his focus has been on, for example, strengthening the European Union or rallying for the defense of Ukraine. But back in France, he's been blamed for everything by the far left and the far right. His term ends next spring, and he can't seek re-election, so there's really a feeling of fund regime the end of his reign. He did not see this movement coming. The students now want 10 billion euros for education, which is not possible. France is in a very precarious position with unprecedented debt, partly from keeping business that's alive during COVID and shielding people from high energy costs. Now it has this big debt, the highest borrowing costs in Europe. Macron told the students there would be better dialogue with them, but that doesn't seem to be enough. And young people have only known Macron, many of these young people, so there's a lot of frustration. Let me ask about the far right party of Marine Le Pen. She has condemned the violence, does she seem to be getting a political boost from all this? I would say absolutely. You know, Scott Poles show her national rally party in the number one position right now. She would be president if the election were held tomorrow. And the French who are sitting home and watching their TV screens in this violence, they're shocked. And a lot of them are contemplating voting for her. She says Macron's government has completely lost control. She called the situation, quote, "budgetary security and immigration chaos." Now today, her party, the National Rally, is having a big party Congress in the city of Orleans, which is a couple hours south of Paris. And outside the conference, there are tens of thousands of protesters who are against her and what they call her racist policies. And you know, when Macron was elected in 2017, he said he would make sure that the French would never have a reason to vote for the far right again. Just Scott, it seems like just the opposite has happened. Government has put curfews in place in dozens of cities this weekend, including parts of Paris. What's the reaction? I mean, people are really kind of shocked. And it's really rare. I've never, in 23 years, I don't feel like I've ever seen a curfew and banned protests. In many cities, protests were actually banned today, but I'm seeing on TV skirmishes like in Leone and Leel. And even in Paris, they changed the route of the protest march, so there's been confusion. And these restrictions are creating tensions in many are charging that the government
and is trying to crack down on basic freedoms. But people are scared of the violence. Just yesterday in a small town, a guy pulled out a rifle and shot and killed somebody and wounded others. It's being investigated as a terrorist attack and President Macron condemned it as an attack motivated by racism. There are real fears this country is falling into a spiral of violence ahead of a very contentious presidential election in six months. - Helen Herbergely in Paris, thanks so much. - Thank you, Scott. (upbeat music) - It's been a tough few weeks at Netflix. - The streaming giant laid off workers and fired some of its top executives. This reorganization comes as Netflix reported slower, quarterly revenue growth and engagement in the US. - MPR's Mandelite Del Barco joins us from Los Angeles to round it all up. Thanks for being with us. - Sure, Asia. - Let's start with those layoffs and firings. What happened? - Well, it was actually a surprise move. A thousand people were laid off. That's 6% of Netflix's workforce. And after handing them their pink slips, the chief content officer was fired. Then the chair of Netflix film and six other top executives were let go. The company's leaders said that they had to make some tough decisions about where to trim or redirect their investments. And even though they beat Wall Street expectations in this latest quarter, Netflix's growth has slowed. Co-CEO Ted Sarandas told investors this week that viewer engagement in the US is slowing down. - We do need better execution in the US. It's just not growing as fast as it could or as fast as we'd like. - Okay, so growth is slowing in the US. But Netflix is global, right? - Yeah, Netflix is actually available in 190 countries. And Sarandas credited the outgoing chief content officer Bella Bajaria for expanding the company's global reach. Her replacement Peter Rice is by all accounts beloved in Hollywood. He's the former president of 21st Century Fox. And when he headed Fox Searchlight, he greenlit films like Slumdog Millionaire Juno and Little Miss Sunshine. - Can you tell us more about this new leadership and the reboot at Netflix? - It will be interesting to see if and how Netflix's content changes eventually. The streamer hasn't had a water cooler hit in a while. And as for the layoffs and firings, here's what Natalie Jarvey, who covers the creator economy in Hollywood, had to say on the Ancler agenda podcast. - It was messy, it was sloppy, it shocked a lot of people, but it still approaches strategy and decision making very different than a lot of Hollywood companies. - So there's a lot of nervousness and unease as the TV and film companies consolidate and reorganize. - Well, yeah, that's the thing, I mean, layoffs and firings seem to be happening a lot in Hollywood. So what's going on? - Yeah, well, just a few weeks ago, Disney had its third wave of layoffs in six months. And a lot of people are bracing for massive layoffs and Skydance, the recent merger between Paramount and Warner Brothers. And remember, Skydance outbid Netflix to acquire Warner Brothers and all its assets. Meanwhile, you've got TikTok and YouTube, which has more revenue and a bigger audience than Netflix, just as the kids with they watch. Netflix seems to be playing catch-up by signing up digital content creators. - Well, what else is in the works for Netflix? - Well, Cerandus continues to insist that Netflix is a streaming company first, but this week he was tapped ahead, the Board of Directors of the American Film Institute, and Netflix continues to release some movies in theaters before streaming them. This Thanksgiving Netflix will release a film on IMAX, the further misadventures of Cliff Booth, starring Brad Pitt. It's a sequel to Quentin Tarantino's Once Upon a Time in Hollywood. And beyond films, Netflix execs once said that they would never do sports. Now they're live streaming them, including NFL Games. And next summer, the Women's World Cup. - That's NPR's Mandelite Del Barco in Los Angeles. Thank you so much for joining us. - Thank you. (upbeat music) - And that's up first for Saturday, October 24th, 2026, I'm Scott Simon. - And I'm Aisha Roscoe. Our producer is Dave Mistich. He has help from Chris Harlan Dunnaway, Andy Craig, and Gabe O'Connor. - Our editor is Diana Douglas, and she worked along with Ruth Sherlock and Russell Lewis. - And our control room is our director, Elena Twork, and our technical director, David Greenberg. - They're so ably assisted by Zovankin Hoven, Simon Lazlo Janssen, and Stacey Abbott. - Our deputy managing editor is Catherine Leidlaw, our executive producer is Amy Stone, and our senior supervisor is Shannon Rhodes. If up first were Hogwarts, this three would be Hermione Granger. - Tomorrow, on the Sunday's story, the Midwest has a reputation as an affordable place to live. People all across the heartland tell us whether that's true for them. - Thanks for listening and for supporting your local NPR station. Do you need to find your local NPR station? Why not study the crop circles in Roswell, New Mexico? - Or you could just do stations.npr.org. (gentle music)
Podcast Summary
Key Points:
A critical vulnerability was discovered in PHP, the software powering 70% of websites, allowing attackers to take control of unprotected servers without passwords or digital footprints.
Researchers used artificial intelligence to identify and exploit the flaws, accelerating the discovery of deep-seated security weaknesses in foundational technologies.
The widespread use of outdated code and A.I.-driven vulnerability scanning has created a race between defenders and attackers, with security teams racing to patch systems before exploitation occurs.
The surge in cyber threats—referred to as “black October”—is linked to A.I. tools’ ability to systematically test and uncover vulnerabilities in core software like banking systems and streaming platforms.
In France, massive protests over education costs and economic inequality have escalated, prompting government curfews, police crackdowns, and political realignments, including a boost for the far-right.
Netflix has faced declining U.S. user growth and responded with significant layoffs and executive firings, signaling a strategic shift amid competition from TikTok and YouTube.
Despite global reach, Netflix is reorganizing its content strategy, appointing a new, experienced film leader, and expanding into live sports and theatrical releases to regain momentum.
Experts warn that for the next 1–2 years, A.I.-accelerated cyber threats will remain a persistent risk, requiring urgent personal and organizational security upgrades.
Summary:
A major cybersecurity flaw in PHP, the software behind 70% of internet websites, has triggered global panic as researchers discovered a vulnerability allowing hackers to take over unsecured servers without passwords or traces. I. tools become more proficient at finding vulnerabilities in critical infrastructure like banking and streaming platforms, the race between hackers and defenders intensifies, with urgent patching required across systems.
In parallel, France is grappling with widespread protests driven by youth demands for better education and economic fairness, fueling political tension and a surge in far-right support. The government has responded with police curfews and protest route changes, amid fears of escalating violence. S.
growth and has announced large-scale layoffs and leadership changes, reflecting broader industry shifts as platforms like TikTok and YouTube gain dominance. The company is now pivoting to reinvigorate its content strategy with new leadership, theatrical releases, and live sports streaming. -enabled cyber threats will remain a constant challenge, urging individuals and organizations to strengthen their digital defenses.
FAQs
A critical flaw was discovered in PHP, a widely used programming language running on 70% of websites. This flaw allows attackers to take over websites without passwords or leaving digital traces.
Researchers used artificial intelligence tools to analyze and test code, enabling them to identify previously undetected vulnerabilities in PHP that could be exploited by hackers.
Because PHP powers a vast majority of websites worldwide, a single flaw means attackers could access or control millions of websites without authentication or detection.
AI tools are now highly effective at finding software flaws in core systems like banking and streaming platforms, leading to a rapid increase in cyber threats and a 'cat-and-mouse' race between hackers and defenders.
Users should update software, use strong, unique passwords, employ password managers, and regularly review their online security, especially if they run a personal website or manage sensitive data.
France has deployed over 70,000 police officers, including elite units, to prevent violence and looting during large-scale protests driven by youth and working-class frustrations over cost of living and education.
Chat with AI
Loading...
Pro features
Go deeper with this episode
Unlock creator-grade tools that turn any transcript into show notes and subtitle files.