Hackers got a four-day head start on epic PHP2Shell vulnerability

AI-assisted discovery of two critical PHP vulnerabilities is now an immediate business risk because PHP underpins a large share of the internet, including many WordPress-based sites, and attackers began exploiting the flaws days before public disclosure. For CIOs and technology leaders, this is a reminder that internet-facing application stacks need faster patch velocity, tighter exposure management, and contingency plans to take systems offline when emergency remediation is not possible, especially as AI shortens both defender and attacker response times.