Trending Now · Omni AI

AI Just Found Two Zero-Days in PHP. 70% of the Internet Was Vulnerable.

Wiz researchers used AI models to uncover PHP2Shell - two critical remote code execution bugs in core PHP (CVE-2026-109618 and CVE-2026-109619), both scoring 9.2 on CVSS v4.0. The bugs let attackers run code on a server with no authentication, and a single exploit script (php2shell) worked against WordPress, Drupal and Joomla container images. Details leaked online on October 20, four days before PHP's coordinated release, and attackers were probing production systems before the patch was public. PHP shipped an emergency fix that patches the root cause and kills every variant, but the bigger story is what this signals: AI-assisted vulnerability discovery has moved from lab demo to internet-scale zero-day, and the disclosure window is now shorter than most security teams can respond to.

Learn More

10x

Faster Content

80%

Cost Reduction

24/7

AI on Autopilot

Published Oct 25, 2026 · By Alfred Belvedere

Today's trend: PHP2Shell: AI researchers uncovered two unauthenticated remote code execution flaws in core PHP (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) affecting roughly 70% of the internet, details leaked four days before the coordinated patch and attackers were already probing - AI-discovered zero-days are now a real attack surface

Automation Can't Fix a Broken Process. It Just Runs the Breakage Faster.

Here's a pattern I've watched play out in nearly every business that tries to "just add AI." They automate something that's already broken, watch it break faster, and conclude the technology didn't work. That's not an AI problem. That's a diagnosis problem. Most founders don't realize the process they most want to automate is the one they understand least. They feel the pain, but they don't see the shape of it. AI doesn't fill in that gap. AI scales whatever you hand it — including the parts that were quietly costing you money while you blamed the headcount. If you're serious about AI CEO automation, this is the first thing you have to get right, and almost nobody does.

Read the full analysis →

AI Just Found Two Zero-Days in PHP. 70% of the Internet Was Vulnerable.

McKinsey Says AI Is Worth $2.52 Trillion a Year. A 30% Cost Rise Cuts That by a Third.

Salesforce Just Paid $5.66B for Braze — The AI Marketing Stack Is Consolidating

SpaceX's AI Unit Just Out-earned Its Own Rocket Business

Automation Can't Fix a Broken Process. It Just Runs the Breakage Faster.