Hackers got a four-day head start on epic PHP2Shell vulnerability
Ars Technica Tom Wilson and Rafe Rosner-Uddin, Financial Times ● Covered by 12 sources
Hackers had a four-day head start exploiting the PHP2Shell vulnerability, which security groups say can enable access to a server’s file system or database. PHP was used to power about 70 percent of websites worldwide, and OpenAI said frontier AI found the flaws before attackers did and helped develop patches. Federal agencies and UK organizations were urged to assess impact and take systems offline or apply updates to fully mitigate the risk.
Why it matters
Hackers were already probing the bug before defenders were told it existed.