Last week, researchers at Google-owned Wiz, and Calif, an AI firm, discovered significant major vulnerabilities in PHP with the help of models from OpenAI and Google. The warnings about the vulnerabilities quickly spread online. Widely known as PHP2Shell, they enable attackers to take over targeted websites.
According to some estimates, PHP runs across 70% of the web. As of this week, CISA has confirmed that hackers are now actively exploiting a pair of critical security vulnerabilities in PHP and has ordered federal agencies within the U.S. government to fix their systems within the next three days.
