PHP2Shell: AI Found It First, and Someone Else Was Already Knocking
Two critical bugs in PHP's core let anyone run code on a web server with one unauthenticated request. AI found them, the embargo leaked, and attackers were trying the exploit four days before the patch. Here's what happened and what web developers can do.
·9 min read