A critical security crisis emerged as AI tools from OpenAI and Google uncovered PHP2Shell vulnerabilities present in PHP versions since 5.4, impacting around 70% of websites. This triggered a two-month global patching race amid widespread exploit attempts and service disruptions. In parallel, Anthropic launched Claude Duet, a proactive AI assistant that automates business tasks across thousands of apps, aiming to compete with other AI agents like Meta's Muse and OpenAI's Dots. Moonshot AI introduced Kimi K3.1 Pro, an open-weight model excelling in coding and finance benchmarks at lower cost, though its cybersecurity implications sparked debate. OpenAI expanded its biotech AI portfolio by acquiring Orchestra Bio to enhance drug development through AI agents integrated into Rosalind. Meanwhile, Nvidia reinforced its AI leadership with new collaborations, tools, and investments, countering growing competition from Amazon and Google while promoting faster AI adoption globally.
PHP2Shell
- trend score
- 2.31
- sources
- 9
- mentions
- 10
Weekly digest Researchers using AI tools from OpenAI and Google uncovered critical PHP vulnerabilities, named PHP2Shell, that allow unauthenticated remote code execution and memory leaks affecting PHP versions back to 5.4. These decades-old flaws impacted about 70% of websites and prompted a two-month global coordinated effort involving patches, site shutdowns, and millions of exploit attempts, intensified by a premature leak of the vulnerabilities during the embargo period.