# PHP flaws draw millions of attack attempts, with no successful exploitation seen

_Published Saturday, October 24, 2026 at 10:07 PM EDT · Security, AI · Latest · Tier 2 — Notable_

![PHP flaws draw millions of attack attempts, with no successful exploitation seen — Primary](https://media.wired.com/photos/6adbb8a7e6d0c133525c3e7c/191:100/w_1280,c_limit/KernelPanic_The%20PHP%20Meltdown%20Shows%20How%20AI%20Makes%20Bugs%20More%20Exploitable.jpg)

Newly public PHP vulnerabilities drew millions of exploitation attempts within hours of publication, Cloudflare analysis cited by WIRED found. The PHP Foundation says it has seen no successful exploitation of the flaws, collectively called PHP2Shell, and many circulating potential exploits appear ineffective.

Researchers at Calif developed practical exploits in early August using frontier AI tools alongside specialist knowledge of PHP. Some underlying issues had been identified in 2024 but were considered too complex to exploit. OpenAI and Wiz researchers subsequently found PHP2Shell flaws independently using AI tools.

The findings show how AI assistance can make longstanding weaknesses practically exploitable, while researchers emphasize that sophisticated work still requires human expertise.

## Sources

- [WIRED](https://www.wired.com/story/kernel-panic-the-php-meltdown-shows-how-ai-makes-bugs-more-exploitable/)

---
Canonical: https://techandbusiness.org/newswire/HvYhlXRzM6AuWKAFw0JDnO
Published: 2026-10-25T02:07:03.437Z
Story chronology: 2026-10-24T12:00:00.000Z
Retrieved: 2026-10-25T06:21:39.669Z
Publisher: Tech & Business (techandbusiness.org)