Hackers exploited two critical PHP vulnerabilities four days before they were publicly disclosed, with Amazon warning they are now being broadly exploited in the wild. The flaws, uncovered with the help of AI models after lying dormant for over a decade, prompted urgent patching warnings from the NSA and UK authorities. Researchers at CrowdStrike and Wiz discovered the bugs, highlighting AI's growing role in both finding and exploiting security weaknesses.
Background
PHP powers a significant portion of the web, making any critical vulnerability in the language a widespread concern. AI-assisted vulnerability discovery has emerged as a notable trend in cybersecurity, raising questions about both defense and offense capabilities.
- Source
- Ars Technica
- Published
- Oct 22, 2026 at 11:25 PM
- Score
- 8.0 / 10