Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password.

OpenAI says its models found PHP2Shell and led a two-month coalition to fix it. It's the same AI that broke into Hugging Face.

As technology makes it easier to find bugs across the internet, it’s more important than ever to secure your data.

WordPress says the flaws are not specific to it and affect any server running PHP.

Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in ...

Government sites went offline over PHP2Shell. Learn when to change your passwords and how to keep one exposed login from ...

Palo Alto Networks reports active PHP2Shell exploitation against internet-exposed PAN-OS management interfaces that allow ...

The challenge creator confirmed a successful breach on October 25, but the recovered private key did not match the advertised ...

Several government and company websites around the world went dark briefly on Wednesday, after artificial intelligence helped discover and address critical bugs that could affect 70% of the internet.

Medicine and programming. At first glance, they may seem like completely different worlds.Doctors examine patients, read test ...

The recent response to the PHP vulnerability (the discovery of a critical vulnerability called "PHP2Shell" in the PHP program ...

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...