Security1 hOctober 28, 2026, 18:58

AI will expose more flaws in volunteer-run open source like PHP, analysts warn

After the AI-assisted PHP2Shell flaw forced website owners worldwide to patch servers, experts warn that open-source foundations like PHP and Log4j remain thinly staffed and underfunded. The PHP Foundation has just one full-time employee and 14 mostly part-time contractors, while PHP runs about 70% of the world's websites.

Techgoondu

Open source

PHP2Shell lets attackers take over a site or steal data without a password
PHP Foundation has one full-time staffer and 14 mostly part-time contractors
PHP runs roughly 70% of the world's websites
The flaw was found by Calif researchers using OpenAI models

#PHP#OpenAI#Anthropic

UK AI minister warns cyber defences breach is 'likely, if not inevitable'

Security

Interview with the volunteer who maintains PHP and patched two critical flaws

Security

'Black October': experts warn of AI-driven vulnerability tsunami

Security

AI will expose more flaws in volunteer-run open source like PHP, analysts warn

UK AI minister warns cyber defences breach is 'likely, if not inevitable'

Interview with the volunteer who maintains PHP and patched two critical flaws

'Black October': experts warn of AI-driven vulnerability tsunami

OpenAI warns the 'defender's window' is closing as Chinese AI models catch up