🇫🇷 French, 23 October 2026, PHP vulnerability
Critical PHP Vulnerabilities Cause Global Internet Outage
Two critical vulnerabilities in PHP caused a global internet outage, highlighting the challenges of coordinated vulnerability disclosure in the era of AI.
The vulnerabilities, known as PHP2Shell, were discovered two years ago but were not taken seriously until AI-assisted researchers from Wiz proved that they could be exploited to take control of a server.
The PHP Foundation admitted that the delay was a ‘structural failure’ due to the security team’s decision-making process and lack of resources.
The coordinated disclosure process was further complicated by a premature release of the patch by Chainguard, which allowed attackers to study the fix and launch cyberattacks.