Ethical Hacking News
Several major websites and online services have shut down due to a critical vulnerability in the PHP programming language, which has been exploited by hackers to gain unauthorized access to websites and steal sensitive data.
The PHP2Shell vulnerability has caused several major websites and online services to shut down due to a critical vulnerability in the PHP programming language. The vulnerability is a type of "remote code execution" (RCE) that allows an attacker to execute malicious code on a website without needing administrative access. The discovery of the vulnerability is attributed to a team of researchers at OpenAI who used a powerful AI model to identify the flaw. The PHP2Shell vulnerability highlights the growing threat of AI-powered attacks on the internet's infrastructure. Several major websites, including 4chan, DeviantArt, and Pokémon Home, have been affected by the vulnerability. Major companies and organizations are urging users to update their websites to the latest version of PHP to prevent exploitation of the vulnerability.
The internet has come to a grinding halt today, as several major websites and online services have shut down due to a critical vulnerability in the PHP programming language. The PHP Foundation, which is responsible for maintaining the PHP language, has confirmed that the vulnerability, known as PHP2Shell, has been exploited by hackers to gain unauthorized access to websites and steal sensitive data.
According to experts, the PHP2Shell vulnerability is a type of "remote code execution" (RCE) that allows an attacker to execute malicious code on a website without needing administrative access. The vulnerability is caused by a flaw in the way PHP handles out-of-memory (OOM) corruption, which can lead to the execution of malicious code.
The discovery of the PHP2Shell vulnerability is attributed to a team of researchers at OpenAI, an artificial intelligence (AI) security group, who used a powerful AI model called GPT-5.6 Sol to identify the vulnerability. The researchers then collaborated with Google-owned security firm Wiz to verify the findings and develop a fix for the vulnerability.
However, the discovery of the PHP2Shell vulnerability highlights the growing threat of AI-powered attacks on the internet's infrastructure. According to experts, powerful AI models have made it easier for hackers to exploit vulnerabilities in the PHP language, which is used by over 69% of all websites.
The impact of the PHP2Shell vulnerability is far-reaching, with several major websites and online services shutting down due to the vulnerability. The list of affected websites includes 4chan, DeviantArt, Wikipedia, and Pokémon Home, among others.
In response to the vulnerability, several major companies and organizations have issued statements urging users to update their websites to the latest version of PHP. The PHP Foundation has also issued a statement urging users to apply the latest security patches to prevent exploitation of the vulnerability.
As a result of the PHP2Shell vulnerability, several major web hosting services have also issued statements urging their customers to update their websites to the latest version of PHP. GoDaddy, for example, has stated that any website using PHP 8.1 or older should be upgraded to a newer version, as they are no longer supported and will not receive official security patches.
In conclusion, the discovery of the PHP2Shell vulnerability highlights the growing threat of AI-powered attacks on the internet's infrastructure. The vulnerability has been exploited by hackers to gain unauthorized access to several major websites and steal sensitive data. As a result, several major companies and organizations have issued statements urging users to update their websites to the latest version of PHP and apply the latest security patches to prevent exploitation of the vulnerability.
Related Information:
https://www.ethicalhackingnews.com/articles/The-PHP-Flaw-How-Artificial-Intelligence-Exacerbated-a-Critical-Vulnerability-in-the-Internets-Backbone-ehn.shtml
https://www.theverge.com/tech/1015906/php2shell-vulnerability-october-2026
Published: Wed Oct 21 16:41:55 2026 by llama3.2 3B Q4_K_M
