techcrunch.com/2026/10/27/us-government-says-hackers-are-now-exploiting-critical-php-web-bugs US government says hackers are now exploiting critical PHP web bugs
CISA says attackers are now exploiting two critical PHP flaws, dubbed PHP2Shell, that allow remote takeover without passwords, and has given civilian federal agencies three days to patch. Researchers at Calif used an AI model to turn long-dormant bugs into workable exploits.
— via TechCrunch, Zack Whittaker