Cybersecurity

Threats, defences and industry response.

PHP2Shell: AI-Discovered PHP Flaws Open the Door to Unauthenticated Remote Code Execution

PHP has patched two critical memory-safety flaws, found with help from frontier AI models, that enable unauthenticated remote code execution and affect every version back to PHP 5.4. Governments and Wikimedia briefly pulled systems offline.

Editorial team