{
  "id": 16325064,
  "title": "The PHP Meltdown Shows How AI Makes Bugs More Exploitable",
  "url": "https://urgent.news/2026/10/24/the-php-meltdown-shows-how-ai-makes-bugs-more-exploitable",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-24T12:00:00.000Z",
  "source": {
    "name": "Wired",
    "slug": "wired",
    "url": "https://www.wired.com/story/kernel-panic-the-php-meltdown-shows-how-ai-makes-bugs-more-exploitable/"
  },
  "original_language": "en",
  "account": "The recent PHP bugs known as PHP2Shell have shown how artificial intelligence can make exploitable bugs more dangerous. Security teams and web administrators scrambled to patch the newly public vulnerabilities, but criminal hackers quickly attempted to exploit them in the wild. Within hours of the vulnerabilities being published, millions of exploitation attempts were made, according to analysis from Cloudflare. So far, no successful exploitation or mass victim takeovers have occurred, as the PHP Foundation has not seen any successful exploitation of the bugs. AI played a role in uncovering practical exploits for the vulnerabilities, which had been known about for years. Researchers at Calif identified the PHP2Shell vulnerabilities and created exploits in early August, partially using frontier AI tools as part of OpenAI's Patch the Planet program. Other researchers at OpenAI and Wiz independently discovered the flaws using AI tools. While AI has made it faster to analyze and potentially exploit vulnerabilities, it is not doing anything new but rather magnifying existing dynamics of vulnerability discovery and coordinated disclosure. Experts emphasize that AI is not unearthing all bugs with simple prompts.",
  "summary": "Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}