PHP2Shell patching response faces criticism

A PHP vulnerability post-mortem found that a small team of maintainers knew about a bug before its public disclosure; the bug was known two years ago. Security researchers say alarm over PHP2Shell has not turned into patching. A separate analysis argues that AI is accelerating vulnerability discovery and that older runtimes need a proactive patch strategy.