Organisations scramble to patch critical PHP flaws found with AI's help

Critical PHP flaws trigger patching scramble

• Organisations and businesses are still scrambling to update their systems after cyber-security flaws were revealed in the widely used programming language PHP. • Cyber researchers at Calif and Wiz unearthed the flaw, known as php2shell and theorised by the PHP Foundation in 2024, in part using OpenAI tools. • Cyber-security lecturer Rory Hopcraft told the BBC the government needed to make sure its own infrastructure was up to date. • While the full impact of the flaw remains to be seen, disruption continues as organisations race to patch.