{"slug": "php2shell-when-ai-puts-70-of-the-internet-at-risk", "title": "PHP2Shell : When AI puts 70% of the Internet at risk", "summary": "Frontier AI models enabled researchers to demonstrate exploitability of long-present PHP flaws, producing the PHP2Shell critical remote code execution vulnerabilities that Wiz says affect 70% of the Internet. The flaws had existed for decades, but the exploit chain was previously at the edge of what human researchers could practically achieve; AI substantially lowered that barrier. The disclosure reached the BBC homepage, and the author warns that traditional human-based cybersecurity won't be enough in the months and years ahead.", "body_md": "These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history. The underlying flaws had been present for decades, but demonstrating their exploitability required an exceptionally complex chain of steps, at the edge of what human researchers could practically achieve. Frontier AI models substantially reduced that barrier, turning a longstanding flaw into an exploit.\n\nYou know it’s bad when a cybersecurity incident makes it to the BBC homepage! And boy, am I happy my blog is just a statically generated website made of simple HTML files.\n\nLike many others, I started out on the web with PHP and MySQL, and eventually moved to WordPress. Knowing how many people around me still rely on PHP for production systems and websites, I’d say the current panic is very justified. Let’s hope they can patch these vulnerabilities before they cause too much real-life damage.\n\nWe need to be better prepared and brace for what’s coming. The next months and years will be rough, and good old traditional, human-based cybersecurity won’t be enough if we want to stand a chance.\n\nSource: [PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet](https://www.wiz.io/blog/php2shell-php-rce)", "url": "https://wpnews.pro/news/php2shell-when-ai-puts-70-of-the-internet-at-risk", "canonical_source": "https://theaspiringnerd.com/php2shell-when-ai-puts-70-of-the-internet-at-risk/", "published_at": "2026-10-22 00:00:00+00:00", "updated_at": "2026-10-22 14:43:40.362754+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence"], "entities": ["Wiz", "PHP", "PHP2Shell", "BBC", "WordPress", "MySQL"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/php2shell-when-ai-puts-70-of-the-internet-at-risk", "markdown": "https://wpnews.pro/news/php2shell-when-ai-puts-70-of-the-internet-at-risk.md", "text": "https://wpnews.pro/news/php2shell-when-ai-puts-70-of-the-internet-at-risk.txt", "jsonld": "https://wpnews.pro/news/php2shell-when-ai-puts-70-of-the-internet-at-risk.jsonld"}}