What a fucking week....

If you've been living under a rock this week, two critical RCE vulnerabilities were found in PHP, collectively known as PHP2Shell . This vulnerability allows unauthenticated attackers to remotely execute code on vulnerable web servers without logging in or providing credentials, potentially seizing server control or stealing data.

These vulnerabilities affected all PHP versions released over the last decade, spanning back to version 5.4. This was particularly scary because according to Wiz, PHP powers 70% of the world's websites, including banking and government applications.

Many websites and pages were taken offline as a precaution, including those of the Finnish government, The Netherlands' cyber-security agency, and Wikimedia (the organization behind Wikipedia).

Researchers at Calif and Wiz used models from OpenAI to find the tools, so AI was pretty useful in finding the flaw.…