# AI-found PHP flaws push governments to take their websites offline

> Original title: AI 到处挖漏洞一整年，终于给人类爆了个大的

- Source: GeekPark
- Published: 2026-10-22T06:15:28.000Z
- Bad Influence: https://badinfluence.news/items/j9pei0llb2hjn6a72w23xtlnb
- Original: http://www.geekpark.net/news/372731

## Summary

An AI-discovered pair of PHP vulnerabilities, called PHP2Shell, led several governments and institutions to take their websites offline on October 21. The flaws let attackers potentially take remote control of a server without logging in, and the PHP patch was released a day early after the details leaked. The source argues AI has cut the cost of finding and weaponizing such bugs, and that the defender's window to patch has shrunk sharply.

## Why it matters

The source ties a single AI-found PHP flaw to government site shutdowns, showing how AI lowers the cost of finding and exploiting old vulnerabilities.