PHP2Shell vulnerability incident shows AI makes old vulnerabilities easier to exploit
WIRED reported that the newly disclosed PHP vulnerabilities are collectively called PHP2Shell, and within hours of disclosure Cloudflare recorded millions of exploitation attempts, but the PHP Foundation said it has not yet seen a successful exploit. Researchers at security firm Calif, using frontier models from OpenAI's Patch the Planet project combined with PHP expertise, first discovered and constructed an exploit in early August, and researchers from OpenAI and Google's Wiz subsequently also independently discovered similar vulnerabilities using AI. Multiple researchers believe AI has not introduced entirely new attack methods, but has amplified the existing pace of vulnerability discovery and disclosure.
re recorded millions of exploitation attempts, but the PHP Foundation said it has not yet seen a successful exploit. Researchers at security firm Calif, using frontier models from OpenAI's Patch the Planet project combined with PHP expertise, first discovered and constructed an exploit in early August, and researchers from OpenAI and Google's Wiz subsequently also independently discovered similar vulnerabilities using AI. Multiple researchers believe AI has not introduced entirely new attack met
Matched fieldsSummary、Body