# Governments take PHP websites offline after AI-found PHP2Shell vulnerabilities

> Original title: Why governments pulled websites offline over the decades-old PHP programming language

- Source: CNBC · Technology
- Published: 2026-10-22T12:35:08.000Z
- Bad Influence: https://badinfluence.news/items/w9zvenjob1iv84b5g3uxjtxs4
- Original: https://www.cnbc.com/2026/10/22/php2shell-vulnerability-what-is-it-and-is-your-data-at-risk.html

## Summary

CNBC reports that European government websites were taken offline as PHP2Shell vulnerabilities, found by researchers at Calif and Wiz using AI models, spread concerns about PHP servers. The NSA urged organizations to patch immediately or take servers offline, and a working exploit was reportedly coded by Tolmo in less than a day. The report says the exploit timeline shrank from weeks to hours in what it calls the Mythos era that began in April 2026.

## Why it matters

The report shows how AI shortened the time from vulnerability discovery to exploit, which matters for anyone running PHP servers and judging their patch timelines.