Update
OpenAI Helps Uncover Critical PHP Flaws
OpenAI, along with researchers from Wiz and Calif, has identified critical PHP vulnerabilities affecting millions of websites. These vulnerabilities, known as PHP2Shell, could allow attackers to execute malicious code and access sensitive information. The PHP Foundation released emergency patches for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Administrators are advised to update vulnerable installations immediately or take affected systems offline. The vulnerabilities also affect PHP’s core engine, potentially exposing websites running popular platforms like WordPress and Drupal. OpenAI’s Patch the Planet initiative coordinated researchers and infrastructure providers to prepare fixes before public disclosure.