PHP's creators disclose a critical memory-management vulnerability, dubbed "PHP2Shell", that affects up to 70% of websites, discovered via GPT-5.6 Sol in August (Robert McMillan/Wall Street Journal)

PHP’s creators have disclosed a critical memory-management flaw, dubbed “PHP2Shell,” that could affect up to 70% of websites, making this a broad operational and reputational risk for organizations running PHP-based applications. For CIOs and technology leaders, the strategic takeaway is that AI is now accelerating both vulnerability discovery and exploitation, so IT teams need faster asset inventory, patch orchestration, and tighter web application defense to reduce exposure before attackers weaponize the bug at scale.