PHP2Shell: l’AI scopre falle critiche in PHP, attacchi già iniziati - AI4Business

PHP2Shell: l’AI scopre falle critiche in PHP, attacchi già iniziati - AI4Business

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page it/news/ai4business/intelligenza-artificiale-php2shell-lai-scopre-falle-critiche, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

AI4Business (Italian): an AI helped discover two flaws at the core of PHP, grouped as PHP2Shell, that under certain conditions allow commands to run on a server without credentials; the headline says attacks had already begun.

> Un’intelligenza artificiale ha contribuito a scoprire due falle nel cuore di PHP

_Curator's translation:_ "An artificial intelligence helped discover two flaws at the heart of PHP"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ AI4Business gives a business-oriented explainer: how Calif (Ryan Austin with GPT-5.6 Sol) and Wiz found the flaws, the history from Stefan Esser in 2004 to the 2024 Quarkslab/OSTIF audit, how the bugs work, and AWS's pre-disclosure detection.

Why it is here

From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: l’AI scopre falle critiche in PHP, attacchi già iniziati - AI4Business". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language it-IT. Nothing in the page addresses an AI or hides text from a reader.