The PHP vulnerability affecting 70% of websites worldwide: what you should know

Cybersecurity researchers using an advanced OpenAI model discovered a long-standing PHP vulnerability affecting about 70% of websites and web applications worldwide, and named it PHP2Shell; the vulnerability has existed for at least ten years. Wall Street Journal reporter Robert McMillan said that such flaws are extremely complex and manual investigation could take months, whereas AI can complete this tedious and time-consuming task faster. The PHP Foundation said on Wednesday that it had released a fix patch and update instructions; the FBI's cyber division confirmed that the vulnerability could allow attackers to remotely implant malware, and recommended that organizations unable to patch immediately take their websites offline temporarily. Andrés Guerrero-Saade of SentinelOne said that this incident reflects both AI's ability to accelerate vulnerability researchers and its enhancement of attackers' exploitation capabilities, and that the window between patch release and exploitation is being shortened by AI.