AI-assisted analysis helped researchers and attackers turn long‑standing PHP bugs into immediate exploits
Security teams scrambled to patch newly public PHP vulnerabilities after researchers—some using advanced AI tools alongside human expertise—published practical exploits; Cloudflare recorded millions of exploitation attempts within hours, though the PHP Foundation says it has seen no confirmed successful takeovers so far.
Summary
AI-assisted summary of the linked sourceResearchers at Calif first developed exploits for the set of defects called PHP2Shell in August, using frontier AI programs in combination with expert human PHP knowledge; other teams at OpenAI and Wiz also independently discovered practical exploit techniques with AI assistance. Cloudflare observed millions of exploitation attempts shortly after disclosures, even as the PHP Foundation reported no confirmed successful breaches.