PHP ‘Doomsday Vulnerability’ Exposed: OpenAI and Wiz Use AI to Discover a High-Risk Flaw Spanning 20 Years
The U.S. National Security Agency (NSA) issued an urgent alert: OpenAI and Google’s Wiz team, working together using AI tools, have discovered two critical vulnerabilities affecting all PHP versions 5 and above (since 2004). These vulnerabilities could allow remote exploitation of the server’s file system or database. While there are currently no reports of real-world exploitation, AI has significantly lowered the barrier to attack, making it imperative for tens of millions of websites worldwide to urgently upgrade to PHP 8.5.12.