Patch or go offline, say UK, US and EU agencies as two AI-discovered flaws in PHP, the language behind most websites, allow unauthenticated remote code execution ...

OpenAI says its models found PHP2Shell and led a two-month coalition to fix it. It's the same AI that broke into Hugging Face and an Australian government portal this year.

Government websites across Europe went dark on Wednesday as operators raced to patch two critical vulnerabilities in PHP, one of the most widely used programming languages on the web.

Government websites across Europe went offline as operators scrambled to patch two critical PHP vulnerabilities discovered using AI models.

Two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) allow remote code execution. Patches are out for PHP 8.2-8.5.

The NSA warned that these holes are so severe that if a website can’t be patched immediately, it should be pulled off the web until it can be. The holes allow attackers to infiltrate the server’s file ...

The FBI’s cyber division warned Wednesday about the discovery of two “critical vulnerabilities” in PHP, a widely used programming language that powers many websites and web applications. The ...

The NSA, FBI and Cybersecurity and Infrastructure Security Agency urged organizations Wednesday to fix two critical flaws in ...

A serious security flaw in the widely used internet programming language PHP has shaken the foundations of countless websites ...

Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch ...

OpenAI calls PHP2Shell ‘one of the most impactful security issues in recent memory’, and says frontier AI found it before attackers did.