AI turns a theoretical PHP bug into an exploit that hits 70% of the internet
Is this the new cyber normal?
In one week, critical vulnerabilities hit PHP, eMudhra, Railway, and GitLab. The PHP2Shell bug, found by AI models and leaked before its patch, was exploited within hours, affecting 70% of the web. The author argues LLMs have collapsed the time from disclosure to attack from months to minutes, making panic almost rational.
The time from “hey I heard there’s a bad RCE in this project” to “there are sophisticated, automated, and concerted attacks using an exploit targeting this vulnerability” has gone from weeks/months to hours/minutes.