PHP2Shell vulnerabilities trigger global alerts as tech companies respond

The discovery drew alerts from cybersecurity authorities in Singapore, the United Kingdom, Australia, Canada and the European Union, according to CNBC, underscoring concerns about businesses, government agencies and other organizations that rely on PHP-based systems. Not every website using PHP is necessarily vulnerable, but the software's broad use has raised concerns about the possible scale of attacks.

The U.S. National Security Agency on Wednesday urged organizations using PHP to prepare security updates addressing the vulnerabilities. It warned that the flaws could give attackers direct access to server file systems and databases. If immediate updates were not possible, the agency recommended taking affected systems offline until the vulnerabilities were fully addressed. The Federal Bureau of Investigation also warned that malicious actors could exploit the flaws to execute code remotely, putting sensitive data and networks at risk.

Amazon said its threat intelligence team had detected attempts to exploit the vulnerabilities before they were publicly disclosed. The company said its MadPot threat detection system, which monitors suspicious activity across internet-facing infrastructure, produced the findings, suggesting malicious actors were already trying to exploit the flaws. Amazon said it remained unclear how the attackers obtained information about the vulnerabilities ahead of their disclosure.

Google and OpenAI highlighted the role of artificial intelligence in identifying and addressing cybersecurity threats. Google said its cybersecurity unit Wiz used AI models to help find and investigate the vulnerabilities, while its Gemini AI contributed to assessing the flaws, testing potential attacks and verifying security patches. OpenAI said researchers working with its AI models had also helped uncover critical vulnerabilities in PHP. The company said it had spent the past two months leading a coalition of software maintainers, cybersecurity researchers and security providers to coordinate fixes and prepare protective measures ahead of public disclosure. OpenAI described the flaws as among the most significant security issues in recent memory, pointing to both the potential of advanced AI systems to identify vulnerabilities in widely used software and the risk that similar capabilities could be exploited by cybercriminals.

Cloudflare, which provides cybersecurity and website infrastructure services, said it had deployed protections against the PHP2Shell vulnerabilities through its web application firewall. The company said the measures were designed to help block malicious requests targeting affected systems, adding a layer of defense as organizations work to install software updates. The PHP development team has released security fixes. Authorities are urging website operators to identify affected versions and apply the updates as quickly as possible.