PHP2Shell: How AI Turned a Dormant PHP Flaw into a Boardroom Issue
Over the past week, a critical security incident has spread across the web, and it belongs on the board agenda. Two vulnerabilities in PHP, the engine behind nearly 70% of all websites, allow an attacker to take control of an affected server without logging in. The flaws are known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) are rated 9.2 out of 10. What makes them significant to the leadership is how they came to light. Artificial Intelligence found them, and AI is now helping attackers exploit them faster than before.
