PHP2shell: How two critical flaws in the web's most common language forced sites offline worldwide

Two memory bugs buried in PHP's core let attackers run commands on a server without a password. A leak, an AI-assisted discovery, and a global patching scramble followed. By Stephen Muiruri· Published