After PHP2Shell: AI Accelerates Exploitation, the Patch Window Is Disappearing
heise security author Tobias Glemser reviews the outage incident caused by two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, and argues that what truly deserves attention is the drastic shortening of the time between the release of a security update and its exploitation. The article mentions that organizations such as Wiz used AI to complete in about a week work that previously required a dedicated team and months, and points out that a large number of legacy systems relying on outdated PHP versions and lacking maintenance leave operators with only the choice between running at risk and shutting them down outright.
#Safety / alignment#English text is being prepared.#Agents