On October 21, local time, according to the “Wall Street Journal” report, PHP, a programming language widely used around the world, revealed serious security flaws, which could enable hackers to control servers running on PHP, steal information, or launch cyber attacks on users visiting related websites. The vulnerability was named “PHP2Shell” and was discovered by cybersecurity researchers using AI tools. PHP is an open source scripting language that supports a large number of websites and web applications around the world, and it is estimated that about 70% of websites rely on it to run. In August of this year, researchers at cybersecurity company Calif discovered this vulnerability while reviewing the PHP source code using OpenAI's artificial intelligence model GPT-5.6 Sol. The PHP official later confirmed that a new version to fix serious bugs was online, and “strongly recommended” users to upgrade immediately.

Zhitongcaijing · 2d ago
On October 21, local time, according to the “Wall Street Journal” report, PHP, a programming language widely used around the world, revealed serious security flaws, which could enable hackers to control servers running on PHP, steal information, or launch cyber attacks on users visiting related websites. The vulnerability was named “PHP2Shell” and was discovered by cybersecurity researchers using AI tools. PHP is an open source scripting language that supports a large number of websites and web applications around the world, and it is estimated that about 70% of websites rely on it to run. In August of this year, researchers at cybersecurity company Calif discovered this vulnerability while reviewing the PHP source code using OpenAI's artificial intelligence model GPT-5.6 Sol. The PHP official later confirmed that a new version to fix serious bugs was online, and “strongly recommended” users to upgrade immediately.