PHP2Shell details: Wiz reproduced bugs with Gemini 4 Argon
A post details the PHP2Shell flaws: Calif found them first with GPT-5.6 Sol, Wiz independently reproduced both three weeks later using Gemini 4 Argon and other tools, with 22.6M servers at risk and patches released.
GPT FOUND CRITICAL VULNERABILITIES IN PHP THAT THREATEN 70% OF WEBSITES ON THE INTERNET a researcher at Calif found the first hole back on august 1 using GPT-5.6 Sol. 3 weeks later the Wiz team independently tracked down both bugs, using Gemini 4 Argon, GPT-5.6 Sol and its own Wiz Atlas system they've been named PHP2Shell. a single unauthenticated request is all an attacker needs to run their own code on someone else's server according to Greg Brockman, the bug had been hiding in the code for about 14 years the scale is huge: - any PHP install that serves web requests is at risk - Palo Alto Networks counted 22.6 million vulnerable servers - the Netherlands and Finland temporarily took some government sites offline for 2 months before disclosure, OpenAI worked with the PHP developers, Cloudflare, Wiz and government agencies to prepare fixes under Patch the Planet. admins also got a tool that checks PHP versions still, someone found out about the hole early. Amazon logged an attack attempt on october 17, 4 days before public disclosure fixes are already out in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 now OpenAI is putting $1B into subsidized access to defensive AI tools for organizations with limited resources. the company expects findings like this to spike sharply in the coming months
This post quotes another post: x.com/mikadzyki_nft/status/2097336663429046689