A series of severe software vulnerabilities have been identified recently, particularly affecting PHP, with significant implications for many major websites. Security teams from Calif and Wiz discovered Remote Code Execution (RCE) bugs that were quickly exploited after patch announcements. The PHP Group's response to a leak about these vulnerabilities resulted in a hurried patch release. The situation has sparked discussions regarding the influence of AI in cybersecurity, as additional vulnerabilities have been reported in GitLab and a certificate authority.
Key facts
- Multiple severe software vulnerabilities have emerged, impacting major websites.
- Two RCE bugs in PHP were discovered by security teams from Calif and Wiz.
- The PHP Foundation previously noted one bug but did not address it.
- PHP2Shell is estimated to affect 70% of the internet.
- A max severity bug was reported in GitLab CI/CD.
A short AI summary in our own words. The reporting belongs to Hacker News — Front Page; we don't reproduce it.