PHP2Shell Triggers a Global Security Crisis as AI Speeds Up Vulnerability Discovery

What happened

The article says PHP and GitLab issued urgent security updates on October 21 after researchers found severe remote code execution vulnerabilities, while Node.js and nginx also faced recent security issues. It centers on PHP2Shell, two CVSS 9.2 flaws that the article says had remained hidden for 22 years and were found with AI-assisted code analysis. The article also describes a GitLab CVSS 10.0 flaw and argues that AI is accelerating both vulnerability discovery and exploitation.

Read next