Two critical PHP flaws trigger a global cybersecurity alert
Two critical vulnerabilities in PHP, a language that security firm Wiz estimates powers 70% of the world's websites, triggered a global cybersecurity alert and the temporary removal of sites and services in several countries. The flaws, named php2shell and rated 9.2 out of 10 in severity, went undetected for more than a decade and came to light with the help of OpenAI AI tools. The PHP Foundation released fixes on Wednesday and urged immediate updates.
In 35 seconds
- Two PHP vulnerabilities, present in versions from the past decade, were rated 9.2 out of 10 in severity.
- Wiz, which took part in the discovery, estimates PHP powers 70% of the world's websites.
- The flaws were found using OpenAI AI tools capable of analyzing code faster than people.
IASummary generated by artificial intelligence from a story by BioBioChile. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.