PHP discloses a critical memory-management vulnerability, dubbed "PHP2Shell", that affects up to 70% of websites, discovered using GPT-5.6 Sol in August
THE SO WHAT
An AI-discovered PHP2Shell bug hitting up to 70% of websites is a double signal—AI is now essential for finding systemic vulns, and the internet’s core stack is more fragile than most boards realize. CISOs should treat AI-augmented code scanning as mandatory for legacy languages and push for coordinated disclosure playbooks with vendors.
READ THE SOURCE
MORE FROM THE WIRE
The architect of Trump Accounts wants the program expanded to every American under 40
Expanding government-backed ‘Trump Accounts’ as early IRAs for everyone under 40 would shift trillions in long-term savings flows and create a new distribution rail for asset managers. Fintechs should be modeling how to plug into—or compete with—this kind of state-linked retirement infrastructure if it advances.
Deep & Emerging TechIntel Touts Factory Expansion Progress in Sign of Growing Demand
Intel moving ahead on long-delayed fabs in Arizona and Ohio is another data point that advanced manufacturing capacity—not just design—is the strategic bottleneck. If you depend on leading-edge nodes, start mapping your supply exposure by geography and fab owner, not just by chip SKU.
Deep & Emerging Tech‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
Critical PHP flaws hitting millions of sites is a reminder that a huge chunk of the web still runs on aging, shared infrastructure with thin patch discipline. If your stack touches PHP anywhere, prioritize emergency patching and add a review of legacy language exposure to this quarter’s security agenda.
Deep & Emerging TechCloudflare says it deployed default WAF mitigations for all free and paid tier customers to combat two PHP flaws, roughly nine hours ahead of public disclosure
Cloudflare pushing WAF mitigations for new PHP CVEs to all tiers before public disclosure shows security is shifting toward centrally managed, preemptive controls. If you’re still relying on app-by-app patching as your front line, you’re behind the threat tempo.