Critical PHP Flaws Threaten Millions of Websites in New AI Security Test

Two critical security vulnerabilities dubbed PHP2Shell threaten websites running vulnerable PHP versions, risking server takeover and data exposure. The US NSA advises urgent patching or taking systems offline, while AI models aided in the discovery and remediation process.

This Wire brief sits within Fusion42's coverage of Enterprise Software, and 16 sources have reported it between 21 Oct 2026 and 22 Oct 2026.