Wiz finds PHP2Shell RCE flaws in PHP

The author examines the recent PHP2Shell security incident, where frontier AI models were used to discover complex, decades-old remote code execution vulnerabilities in PHP. The situation highlights the growing risk that legacy software contains latent bugs that AI can weaponize, while open-source maintainers struggle with overwhelming maintenance burdens and a shrinking gap between vulnerability discovery and exploitation. Open article →