GoKawiilPHP vulnerability dubbed 'PHP2Shell' prompts NSA warning and website shutdowns
Researchers at AI firm Calif and Google's Wiz discovered a set of vulnerabilities, dubbed PHP2Shell, affecting all PHP installations serving web requests, using AI tools including OpenAI's GPT-5.6 Sol and Google's Gemini 4 Argon. The flaws allow unauthenticated attackers to remotely execute code on PHP servers, prompting the NSA to urge organizations to patch immediately or take servers offline, and causing some European government websites to go dark. A proof-of-concept video accidentally posted by Calif leaked details early, forcing the PHP Foundation to fast-track patches originally planned for release a day later.