βΆοΈ Watch on YouTube: https://youtu.be/yczS3itJ7wE
π Website: https://tekthrill.com
πΊ Subscribe: https://youtube.com/@tekthrill
AI just found critical bugs hiding in the code behind ~70% of the internet, and hackers fired MILLIONS of attacks. ππ
For more than a decade, PHP, the language behind about 70% of websites with a known server-side language, carried critical flaws ("PHP2Shell", CVE-2026-109618 and CVE-2026-109619) that could let an attacker with no login run code on a web server. Researchers at Calif and Wiz, using frontier AI tools including OpenAI's, uncovered them. PHP shipped emergency patches on October 21. The NSA told organisations to take PHP systems offline if they couldn't patch right away, websites around the world went dark, and India's CERT-In issued a critical alert.
Then the attacks: Amazon's honeypots logged an exploit attempt on October 17, four days before the bugs went public. Cloudflare saw tens of thousands of attempts within 45 minutes of disclosure and millions within a day. Plot twist: so far there are no confirmed reports of a successful break-in, and building a reliable exploit is proving hard. On October 23, PHP warned of a separate new, unpatched issue (CVE-2026-115560) that only affects unusual setups; its advice is to set session.upload_progress.enabled=0 until the next routine release.
Run a website? Update PHP today. Is "Black October" just the beginning of AI-powered hacking? Drop your take below π
Follow TEKTHRILL for daily AI news! π
Visuals are AI-generated illustrations.
π In this Short: Black October explained, the PHP2Shell vulnerability, how AI found bugs in 70% of websites, millions of hacking attempts, CERT-In's alert, the new PHP flaw, and why you should update PHP today.
#BlackOctober #AINews #CyberSecurity #PHP #PHP2Shell #AIHacking #ArtificialIntelligence #TechNews #Hacking #Tekthrill #Trending
