PHP2Shell: AI helped expose two critical PHP flaws that put most of the web at risk
Two critical flaws in the core of PHP, the language behind roughly 70 percent of websites, let attackers run code on servers without logging in. They hid in the engine for more than a decade. Frontier AI models helped researchers prove they were exploitable, and attacks have already started.