AI-found PHP flaws expose risks to volunteer-run internet infrastructure

Critical vulnerabilities dubbed PHP2Shell, hidden in the widely used PHP programming language for over a decade, were recently uncovered by security researchers using AI, forcing emergency updates worldwide and briefly knocking government and corporate sites offline. Experts warn this may be the first of many AI-exposed flaws, since much critical open-source software is maintained by volunteers with limited time and resources.