🚨AI uncovers a “nuclear-level” PHP vulnerability; half the internet patches overnight
On October 21, PHP officially disclosed two critical vulnerabilities (codenamed php2shell, CVE-2026-109618/109619, CVSS 9.2). They allow remote code execution without a login, and affect all PHP sites offering web services to the public.
🤖 OpenAI says security team Calif discovered the vulnerability with GPT-5.6 Sol; Wiz also independently found it using AI, calling it one of the most impactful security incidents in recent years
🏛 The U.S. CISA requires an immediate upgrade to 8.5.12/8.4.27/8.3.36/8.2.35; no exploitation has been detected so far
🌐 Some government websites in the Netherlands, Finland, Denmark, and France have been taken offline as a precaution; Wikipedia and others have also been affected (The Verge/Reuters)
Crypto community reminder: Many project websites, blogs, and forums run on PHP. Be wary over the next few days of phishing links claiming “urgent upgrades” or “wallet migrations.” Keep your assets secure—there’s no need to rush.
AI can help people find vulnerabilities, and it can help hackers find them too—which side do you think will ultimately have the upper hand in this AI security arms race? Share your thoughts in the comments 👇
#AI #网络安全 #PHP漏洞 #CryptoSecurity
For reference only; this is not investment advice
On October 21, PHP officially disclosed two critical vulnerabilities (codenamed php2shell, CVE-2026-109618/109619, CVSS 9.2). They allow remote code execution without a login, and affect all PHP sites offering web services to the public.
🤖 OpenAI says security team Calif discovered the vulnerability with GPT-5.6 Sol; Wiz also independently found it using AI, calling it one of the most impactful security incidents in recent years
🏛 The U.S. CISA requires an immediate upgrade to 8.5.12/8.4.27/8.3.36/8.2.35; no exploitation has been detected so far
🌐 Some government websites in the Netherlands, Finland, Denmark, and France have been taken offline as a precaution; Wikipedia and others have also been affected (The Verge/Reuters)
Crypto community reminder: Many project websites, blogs, and forums run on PHP. Be wary over the next few days of phishing links claiming “urgent upgrades” or “wallet migrations.” Keep your assets secure—there’s no need to rush.
AI can help people find vulnerabilities, and it can help hackers find them too—which side do you think will ultimately have the upper hand in this AI security arms race? Share your thoughts in the comments 👇
#AI #网络安全 #PHP漏洞 #CryptoSecurity
For reference only; this is not investment advice