AI-assisted security researchers discovered two critical vulnerabilities, dubbed PHP2Shell, in the PHP programming language that could allow attackers to execute code on web servers. These flaws, rated 9.2 on the CVSS v4.0 scale, had existed for 14 years before being found by models like OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon. The discovery highlights a shift in cybersecurity, where AI tools are aiding in proactive vulnerability hunting, providing a crucial window for developers to patch systems before malicious actors can exploit them. AI
IMPACT Accelerates proactive vulnerability discovery, enabling faster patching of critical infrastructure.
RANK_REASON AI-assisted discovery of a long-standing vulnerability in a widely used programming language. [lever_c_demoted from research: ic=1 ai=1.0]
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →