Report
Critical PHP vulnerabilities (PHP2Shell) discovered with AI assistance get patches a day early
A tech-news roundup reports several European government, school and hospital websites went offline as organizations rushed to protect them.
TLDR
A tech-news roundup says the PHP2Shell flaws were found using GPT-5.6 Sol and could allow unauthenticated remote code execution. The PHP Foundation says it released patches a day early after CVE IDs circulated, though its fixes cover only PHP 8.2 and newer. AWS analysts claim at least one actor began exploiting the flaws on October 17, before public disclosure.
Combined views
26.7K
3 Sources, first seen ago