Research
AI Turns Historic PHP Bugs Into Active Threats
WIRED AIhigh confidence
Why it matters
- →AI is actively lowering the skill floor for exploiting legacy vulnerabilities.
- →Security teams must now defend against automated exploitation of old bugs.
- →Human expertise remains critical, but AI acts as a significant force multiplier.
Security researchers have identified a class of PHP vulnerabilities, dubbed PHP2Shell, that were known for years but deemed too complex for humans to exploit. AI models from OpenAI and Google-owned Wiz helped uncover practical exploitation paths, leading to millions of automated attack attempts within hours of disclosure. While no mass breaches have been confirmed, the event highlights how AI accelerates the weaponization of legacy code. Experts warn this dynamic will pressure IT teams to patch older software more rapidly.
Read originalThe story around this
TopicAI Uncovers Critical PHP Vulnerabilities
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
