Critical web security flaws spark global alarm as Google, OpenAI and Amazon respond

Insight summary

• •Critical security vulnerabilities named PHP2Shell were discovered in PHP, a widely used open-source programming language powering many websites and web apps.
• •The vulnerabilities allow remote execution of malicious code, risking exposure of sensitive server data.
• •US agencies NSA and FBI issued urgent warnings, recommending security updates or taking affected systems offline.
• •Other countries including Singapore, UK, Australia, Canada, and the EU have also issued alerts on the vulnerabilities.
• •Tech companies like Google, OpenAI, Amazon, and Cloudflare are using AI and threat intelligence to detect, investigate, and mitigate attacks.
• •The PHP development team has released security patches, and rapid application of these updates is strongly urged to prevent exploitation.
• •The incident highlights both the widespread risk of flaws in common software and the growing role of AI in cybersecurity defense and risk identification.