PHP2Shell: AI Found a Critical PHP Flaw, Sites Go Offline
Two critical vulnerabilities in PHP — the programming language quietly powering roughly 70 percent of the world’s websites — were publicly disclosed on Wednesday, October 21, 2026, and the fallout was immediate. Dubbed “PHP2Shell”, the flaws let attackers run their own code on affected servers and read sensitive data like passwords from server memory. Within…