AI bug hunting accelerates as PHP2Shell draws mass exploit attempts
Original title: AI Is Changing Everything About Hacking. No One Knows What Happens Next
Cloudflare's CEO said exploit attempts rose from thousands before disclosure to millions within hours.
A 404 Media commentary says researchers and AI tools are finding flaws faster across widely used software, with PHP vulnerabilities dubbed PHP2Shell drawing the most attention. Wiz, Calif, and OpenAI are credited with discovering those PHP issues using AI. Cloudflare CEO Matthew Prince said the network saw thousands of exploit attempts in the 10 hours before public announcement, then tens of thousands, hundreds of thousands, and millions afterward. The piece also cites recent issues in eMudhra, Node.js, GitLab, Plex, Railway, and OpenCode, and says AI shortens the window between discovery and offensive use.
Unconfirmed: Exploit-volume figures come from Matthew Prince's post, and the article is cut off during the embargo dispute.
- Prince said attempts hit millions after the PHP2Shell announcement.
- OpenAI said the same capability can help attackers build exploits.
- Chainguard was criticized for breaking the PHP disclosure embargo.
- The article says abliterated and open-weight models lack commercial guardrails.
Impact: Internet-scale attempts to exploit PHP flaws
| Product | Affected |
|---|---|
| PHP | — |
- Vendors
- Cloudflare
- Products
- PHP
- Organizations
- WizOpenAIChainguard
From the original article
7 min read at 404media.co
'Black October:' The PHP vulnerabilities and a series of other hacks and bugs have cybersecurity experts freaking out and unsure what happens next.
By Jason Koebler · 404media.co
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.