AI Finds Decade-Old PHP Flaw: GPT-5.6 Sol and Gemini Uncover Critical PHP2Shell Bug Affecting Most Websites

AI Finds Decade-Old PHP Flaw: GPT-5.6 Sol and Gemini Uncover Critical PHP2Shell Bug Affecting Most Websites

Artificial intelligence has exposed one of the most serious internet security flaws in years. On October 21, PHP released fixes for two critical vulnerabilities that could let an attacker run code on a web server without logging in, a danger rated 9.2 out of 10 in severity. The flaws had sat hidden in PHP's code for more than a decade, even though the language powers a huge share of the world's websites.

The discovery came from AI-assisted research. Security firm Wiz found the flaws using its autonomous research agent Wiz Atlas, working alongside Google's Gemini 4 Argon and OpenAI's GPT-5.6 Sol, in coordination with PHP's core developers and security firm Calif. The fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and administrators have been urged to update immediately, since older, unsupported versions may need vendor fixes.

The response showed how seriously the threat was taken. Several European government agencies, including in Germany, France and Finland, took websites offline as a precaution, and Cloudflare reported millions of exploitation attempts shortly after disclosure, though the PHP Foundation and Dataminr said no successful compromises had been confirmed. The episode is a double-edged warning: AI can now find bugs humans missed for years, but it can also hand attackers the tools to exploit them faster than ever.

Source: read more

Comments

Popular posts from this blog

Fairbairn's Walk-Off Field Goal Seals Wembley Thriller as Texans Edge Jaguars 34-31

Anthropic IPO: Public S-1 Filing Expected Today Ahead of $2 Trillion Listing

Netflix Beats Earnings but Slashes Ad Forecast — Stock Tumbles After Hours