VN — VnExpress

Behind the Race to Stop 'Internet Chaos'

SecurityOctober 22, 20261 min read

A race is on to patch two serious PHP security flaws, called PHP2Shell, before hackers can use them widely. Researchers found the flaws with AI, and experts warn that things could get chaotic.

What happened

Security teams found two bugs in PHP, a popular programming language used to run websites. The bugs are called PHP2Shell. Hackers could use them to run harmful software on any web server that has not been fixed. Some attacks could take only a few seconds. A small team of researchers and engineers worked together in secret to build a fix.

Key facts

The fix needed changes to nearly 200 files.
Developers wrote more than 10,000 lines of code during the work.
The planned release date for the fix was October 22.
The flaw information was made public on Hacker News on October 21, before the fix was ready.
Researchers found one of the flaws in late July using OpenAI's GPT-5.6 Sol model.

Why this bug is special

PHP2Shell has been hiding in PHP code for many years. It was very hard to attack, so most people forgot about it. According to the article, AI found a way to use it. Experts compare it to Heartbleed, a big bug from 2014 that forced the world to rush to protect hundreds of thousands of servers.

Why it matters

PHP runs many websites, so a flaw this serious can affect a lot of people. If hackers learn how to use the flaw before servers are fixed, their data and websites could be at risk. The story also shows that AI can help find serious bugs, but it can also help attackers move faster.

What to watch

Whether website owners install the fix quickly.
Whether hackers start using the flaws widely after the details became public.
How PHP developers and security companies share updates as the fix is released.

Glossary

PHP: A popular programming language used to build and run many websites.
PHP2Shell: The name of two serious security flaws in PHP that could let hackers run harmful software on web servers.
Heartbleed: A large security flaw found in 2014 in OpenSSL that could expose passwords and private data on servers.
GPT-5.6 Sol: An AI model from OpenAI, used by researchers to find the PHP flaw.

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

Security전자신문Oct 26

Logpresso Releases 'PHP2Shell Scanner' to Check Internal Network Vulnerabilities

Logpresso has released a 'PHP2Shell Scanner' app that diagnoses the PHP remote code execution vulnerabilities known as PHP2Shell. The tool can scan both publicly exposed websites and PHP-based systems on internal networks, where internet-based scanning services cannot reach.

SecurityVnExpressOct 26

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.