The week of Oct. 19-23: What happened, what matters, what's next

5 Min Read

This week, AI exposed a critical PHP programming language vulnerability, rattling enterprises and governments and leading some to temporarily take their websites offline. This was the latest example of how AI can exploit vulnerabilities that were previously too difficult for bad actors to target.

Meanwhile, Meta faced backlash for attempting to train its AI on news coverage, and OpenAI has reduced its target valuation as the company is in talks with investors for a new funding round. The memory shortage continues to put a damper on the PC market, which means CIOs will need to think outside the box for next year's device budgets.

News Highlights Oct. 19-23

AI exposes vulnerabilities in PHP programming language

What happened: Government agencies in Europe temporarily took their websites offline after AI uncovered vulnerabilities in the PHP programming language this week. PHP is an open source scripting language that runs websites and has been in use for more than 30 years. Amazon detected an attempt to exploit the PHP vulnerability from an anonymous internet address, likely originating from a bad actor. Fortunately, the PHP development team released fixes for the vulnerabilities on Wednesday.

Related:FBI breach exposes enterprise patching crisis

Why it matters: AI's speed at identifying and exploiting vulnerabilities has led to a fundamental shift in the patching process. CIOs and CISOs have to rethink their approach to vulnerability management to keep pace with the speed of AI. However, IT executives also have access to AI as a defense mechanism, using AI to scan for application misconfigurations and overbroad access permissions, as well as to triage vulnerabilities. Using AI against AI can speed up vulnerability remediation.

Meta attempts to access online news content to train its AI

What happened: Online advertisers and news publishers are pushing back against Meta Platforms' new commercial terms, which would give Meta's AI unlimited access to their online content, and are requesting that EU and UK regulators halt the new terms. Meta responded that the new web crawling terms apply to only the company's ads and business products, for use in accessing accurate information for product recommendations, for example. After the backlash, Meta changed some of the language in its commercial terms of service, but legal experts said publishers should remain concerned.

Why it matters: Meta's attempt to access business users' content to train its AI models puts businesses between a rock and a hard place, as they must accept the new commercial terms to continue using Meta's services. It's a reminder to CISOs and CIOs that, in addition to developing internal AI governance policies, enterprises should consider how external AI might affect their data privacy efforts.

Related:AI inference attacks put new pressure on enterprise privacy

OpenAI targets $1.25 trillion valuation with new funding round

What happened: OpenAI is pursuing $30 billion in a new funding round to target a valuation of $1.25 trillion. In March, OpenAI brought in $122 billion via a funding round to increase the company's valuation to $852 billion. Coatue Management, United Arab Emirates and BlackRock Inc. are among the firms in talks to co-lead the latest funding round.

Why it matters: OpenAI initially pursued a $1.4 trillion valuation in this new funding round but reduced it to $1.25 trillion. This reduction demonstrates that even AI giants face increasing pressure to demonstrate the ROI of AI investments. CIOs are also under greater pressure to demonstrate to their boards and C-suite peers the value of AI. Recent research by Gartner reveals that CIOs with successful AI pilots and deployments know when to pause AI investments that aren't delivering the right business outcomes.

Global PC shipments drop 21%

What happened: Global PC shipments dropped 21% year-over-year to 57 million units in Q3, and are forecast to decline by 27% in Q4, according to Counterpoint Research. Increases in memory and component costs continue to drive up device prices and reduce PC demand. Still, Counterpoint Research revealed that while consumer demand has been weak, commercial demand was relatively resilient due to continued device replacement efforts and Windows migrations.

Related:At Black Hat 2026, security leaders go deeper to get ahead

Why it matters: Over the past year, the PC market felt the squeeze as memory and storage chips have been largely scooped up for use in AI infrastructure buildouts. Still, CIOs are finding workarounds to avoid increasing their device budgets by extending the lifecycle of their current server and PC investments. In March, Marc Hoit, CIO at North Carolina State University, said quotes for servers were already two to three times as expensive as the previous month.

From InformationWeek: Worth the read

You'll find a wealth of insight and analysis on the InformationWeek site, but here are a few curated picks from the week that should be at the top of your reading list.

CIOs winning the AI race know when to slow down
Pressing pause on AI deployments might seem counterintuitive, given the pace at which AI is evolving. But Gartner's recent CIO survey suggested that IT executives who are delivering on better business outcomes while proving AI value are more likely than their peers to establish two stopping points in the AI lifecycle — at the pilot and production stages.

InformationWeek Podcast: The fight against cloud misconfigurations
Jan Bee, CISO at TeamViewer, and Kandarp Desai, CTO at Xactly, join InformationWeek senior editor Joao-Pierre Ruth to discuss what AI can and can't do to resolve bungles in cloud systems.

How to show business value from data and AI
Ray Collins, senior director analyst at Gartner, explains why it's critical for data and analytics leaders to identify business value metrics that directly link data, analytics and AI operational investments to measurable business outcomes.

Esri CIO: Don't use technology as a sledgehammer
When it comes to process improvement, adding more technology isn't the first move Esri CIO Thomas Phelps recommends. He also shares his advice for how to vet systems integrators and vendors when launching a new IT project.

Coming up: Dates to watch

Oct. 29: Amazon will close out the month with its Q3 earnings call with investors. In Q2, the company's net sales grew 20% year-over-year to $200.6 billion.

Oct. 28: E-commerce giant eBay is holding its Q3 earnings call this month. The company recently announced plans to lay off 9% of its workforce.

Nov. 17-20: The Microsoft Ignite event will be held in San Francisco and include sessions on managing policy for humans and AI agents, zero-trust security, physical AI and more.

Did the PHP exploit impact your organization? How is your company handling increased PC and device costs? Let us know at [email protected].

About the Author