Researchers Find AI-Assisted Exploitation of Newly Disclosed PHP Vulnerabilities

The PHP Foundation announced two critical vulnerabilities in the widely used PHP scripting language that could affect millions of websites. Security analysts said the flaws were discovered with the help of AI-driven code-review tools, which accelerated the identification of the bugs that had existed for years.

Within four days of the vulnerabilities being disclosed, Amazon Web Services reported attempts to use the PHP2Shell exploit, and the attacks were described as being "broadly exploited" across the internet. Experts warned that sites that do not apply the patches promptly could face data-theft or service-disruption risks.

The incident highlights a growing trend in which AI is employed both to find security weaknesses and to automate the exploitation process. Researchers noted that while AI can aid defensive efforts, it also lowers the technical barrier for malicious actors, allowing them to launch sophisticated attacks more quickly.

"AI tools are becoming increasingly capable of assisting cybercriminals," said a spokesperson for a cybersecurity firm, adding that the rapid adoption of such technology underscores the need for faster patch cycles and stronger defensive measures.

The PHP Foundation urged all users to update to the latest version of the language and to monitor their systems for any signs of compromise.