Critical PHP2Shell Vulnerabilities Force Government Websites Offline
Major security vulnerabilities, dubbed 'PHP2Shell,' have been discovered in the widely used PHP programming language, prompting several European government websites to go offline. The flaws allow unauthenticated hackers to remotely execute code and steal sensitive proprietary data. In response, the U.S. National Security Agency (NSA) issued an urgent warning for organizations to patch their servers immediately or disconnect them from the internet. The discovery highlights a shift in cybersecurity dynamics driven by artificial intelligence; researchers used AI models like GPT-5.6 Sol and Gemini 4 Argon to identify the flaws, while attackers can now weaponize such vulnerabilities in hours rather than weeks. While The PHP Foundation fast-tracked patches following an accidental leak of a proof-of-concept video, security experts warn that the speed of AI-augmented attacks necessitates much faster defensive responses.
Tickers: $GOOGL
Topics: AI-augmented attacks cybersecurity threat government website outages PHP vulnerability PHP2Shell
Part of the story Critical PHP2Shell Vulnerabilities Prompt Global Security Response from Tech Giants (5 articles)