AI helped uncover something dangerous in the software behind a huge part of the internet. Government websites went offline as a precaution while defenders raced to respond. Here's how OpenAI and Google's models helped researchers uncover PHP2Shell, why finding the flaws was only the beginning, and what you can do to protect yourself. ______________________________________________ My Links 🔗 ➡️ Twitter: https://x.com/WesRothMoney ➡️ AI Newsletter: https://natural20.beehiiv.com/subscribe Want to work with me? Brand, sponsorship & business inquiries: [email protected] ______________________________________________ SOURCES: Dutch government: precautionary website shutdowns: https://www.rijksoverheid.nl/actueel/nieuws/2026/10/21/aantal-websites-rijksoverheid-preventief-offline-na-kwetsbaarheden-php PHP: official security advisory and updates: https://www.php.net/archive/2026.php#2026-10-21-5 Calif: the original PHP2Shell research: https://calif.io/php2shell/ Wiz: how AI helped uncover the vulnerabilities: https://www.wiz.io/blog/php2shell-php-rce OpenAI: Patch the Planet and the coordinated response: https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/ Cloudflare: protections against PHP2Shell: https://blog.cloudflare.com/php-vulnerabilities-waf-protection NCSC: practical steps for staying secure online: https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online #ai #cybersecurity #php2shell
ADVERTISEMENT
Time to update the password to 5.
next year will be fun
TLDR: They are not shutting it down.
Digital ID now sounds like the worst possible thing to implement
you know what, if the internet gets locked down and i have to stay offline maybe i'll start to feel better
Honestly at my limit here. For beginners, reading every candle strategy can feel like a losing battle. I've watched endless videos and paid for three courses, but nothing sticks. Theory isn't working I need real results. If anyone knows someone real who guides you through live charts while you learn, let me know. This is my last shot.
First they create a problem then they offer solution…at the cost of freedom ofc
Oh thank goodness my password is 7. The AI will never guess that.
Hey, what a great excuse for government to shut down or control the internet.
Inevitable. Software that writes itself should be a sign that nothing created in the old paradigm will survive.
1960: Garbage in, garbage out. 2026: Humanity in, humanity out.
It would be hilarious if someone told it to select a random value between 0 and INT_MAX and it just happened to land on 4.
Sounds to me like the worst possible time to update your passwords. When you can't verify that you're on the correct website and you try to change your password, isn't the likelihood of you getting f'ed higher than usual?
So.small guys are screwed but big guys are fine. Somethings stinks to high heavens as usual. Plausible deniability zero accountability.
I'm noting that a lot of games aren't coded using PHP, but their forums are. Be safe people.
This is how they handle people being too aware. Take down the internet using AI as an excuse
If they say to stay off the web, you get on the web and surf the web..
Why should vulnerabilities be put out to full public before fixes are out? Telling people to avoid the internet is ridiculous in a highly internet connected and dependent world.
You know something is coming up because all the major apps are forcing people to use passkeys rather than passwords
I want the AI bubble to burst