全球互联网“今夜惊雷”：AI发现的PHP高危漏洞“PHP2Shell”引发多国政企网站紧急关站

全球互联网“今夜惊雷”：AI发现的PHP高危漏洞“PHP2Shell”引发多国政企网站紧急关站

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page hk/news/ijiwei/n-1122779, snapshot 20261025T093507Z. Copied byte for byte; every file's sha256 is in captures/20261025T093507Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Ijiwei (Chinese): 'tonight's thunderclap' for the global internet: the AI-found PHP flaw PHP2Shell forced emergency site closures at government and corporate sites in several countries. On 21 October 2026 a rare security storm swept the internet; the two flaws are rated 9.2 on CVSS v4.0 and let an attacker run code on a server with only a crafted request and no credentials; sites closed included those in Finland and the Netherlands. Summarising OpenAI's own blog, it says OpenAI led for two months a coalition of PHP maintainers, security researchers and vendors; that Calif's researchers found a key flaw in August 2026 with OpenAI's GPT-5.6 Sol in the 'Patch the Planet' open-source audit programme; that Wiz independently found and reported both flaws, verifying them with a combination of Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol; that OpenAI called it one of the most impactful security issues in recent memory and warned similar findings will rise sharply in coming months; and that OpenAI announced a 'Daybreak' subscription programme with $1 billion of subsidy for organisations protecting critical infrastructure, with a PHP version-detection tool and a Codex skill. On the leak, it says PHP planned to disclose on 22 October, but on 20 October details and a proof-of-concept tool named PHP2Shell leaked online; watchTowr confirmed it and its CEO said the company had reproduced both flaws; PHP announced on 20 October an emergency update for 21 October 14:00 UTC, and heise reported the disclosure had been due on 22 October.

> 2026年10月21日，一场罕见的安全风暴席卷全球互联网。

_Curator's translation:_ "On 21 October 2026 a rare security storm swept the global internet."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "全球互联网“今夜惊雷”：AI发现的PHP高危漏洞“PHP2Shell”引发多国政企网站紧急关站". Selected mechanically, not read by a person.

Capture notes

Language zh. Nothing in the page addresses an AI or hides text from a reader.