NSA Says Patch PHP or Go Offline as AI-Found PHP2Shell Flaws Reach ~70% of the Web

This story was originally published on HackerNoon at: https://hackernoon.com/nsa-says-patch-or-go-offline-as-ai-found-php2shell-flaws-reach-70percent-of-the-web.
NSA says patch PHP or go offline: AI-found PHP2Shell flaws let attackers take over servers running ~70% of websites. Here’s who’s exposed and how to fix it.
Check more stories related to programming at: https://hackernoon.com/c/programming. You can also check exclusive content about #php, #php2shell, #php-flaws, #patch-php, #nsa, #nsa-says-patch, #nsa-says-go-offline, #hackernoon-top-story, and more.

This story was written by: @patching. Learn more about this writer by checking @patching's about page, and for more stories, please visit hackernoon.com.

AI models from OpenAI and Google helped researchers find PHP2Shell, two critical PHP flaws that let attackers take over servers with no login. PHP runs about 70% of websites, so WordPress, Drupal and Magento sites on unpatched PHP are all exposed. The NSA says patch to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now, or take systems offline.