Security researchers demonstrate AI-assisted discovery and rapid exploitation of PHP vulnerabilities

According to CSO Online, security researchers used AI tools to uncover critical vulnerabilities in the widely-used PHP programming language, and active exploits began within hours to days after cybersecurity firm Chainguard unilaterally broke a coordinated disclosure embargo. The early attack window occurred because attackers could study patches in binary form and craft proof-of-concept exploits before system defenders had patched their infrastructure. AWS and Cloudflare reported that active exploits began while patch availability remained limited.