Critical PHP flaws, found with AI help, take sites offline
PHP fixed two flaws that let attackers run code on web servers without logging in. Security firms used AI tools to show how serious they were.
The PHP project released fixes on October 21 for two flaws rated 9.2 out of 10. The firm Wiz says it found its part with AI tools, including OpenAI’s GPT-5.6 Sol.