PHP2Shell flaws expose 22M servers to unauthenticated RCE
The ABC News segment reported on a cybersecurity emergency triggered by two critical vulnerabilities in PHP, the scripting language powering roughly 70% of identifiable websites. It described websites in the US and Europe going dark as owners rushed to apply emergency patches after the FBI highlighted risks of remote code execution and data theft. Expert Sherid Degrio from Palo Alto Networks' Unit 42 explained the flaws in PHP's memory management and error handling, confirmed OpenAI's view of the issue's severity, and outlined patching steps and resilience planning. Sourcing drew from the FBI advisory, OpenAI statements, and Palo Alto telemetry showing 22 million exposed instances. The interview emphasized using AI defensively against future AI-driven vulnerability discovery while stressing the need for human security experts. It framed the event as the new normal of high-velocity disclosures amid accumulated technical debt.
Source: ABC News