337 points229 comments
PHP2Shell flaw shows AI revives 40-year tech debt
What is AI is forcing us to pay off 40 years of technical debt?
A newly disclosed PHP2Shell vulnerability lets attackers turn PHP code into a command shell. The finding shows AI tools can automatically weaponize old bugs, forcing firms to finally patch decades-old legacy code.
Who it is for
Developers and security teams should audit legacy PHP applications and patch them now, before AI-driven exploits make them easy targets.