NSA 就 AI 发现的 PHP2Shell 关键漏洞发布修复警告

AI HOT 精选

AI HOT 精选2026年10月22日

NSA 就 AI 发现的 PHP2Shell 关键漏洞发布修复警告

6.9内容质量

TL;DR · AI 摘要

NSA å°± AI åç°ç PHP2Shell å ³é®æ¼æ´åå¸ä¿®å¤è¦å Â· AIHOT Rohan Paul Â· @ rohanpaul ai Â· X Â· 2026-10-22 1...

核心要点

主题聚焦：NSA 就 AI 发现的 PHP2Shell 关键漏洞发布修复警告
来源：AI HOT 精选，建议结合原文判断细节。
AI 分析暂不可用，本条为保底评分与摘要。

#AI#后端#云计算#安全

打开原文

NSA å°± AI åç°ç PHP2Shell å ³é®æ¼æ´åå¸ä¿®å¤è¦å Â· AIHOT

Rohan Paul

Â· @

rohanpaul_ai

Â· X

Â·

2026-10-22 13:13

5 å°æ¶å

ç²¾é

AI è¯å

83

AI å¯¼è¯»

æ¨èçç±

å¦å¤ 1 å®¶ä¹æ¥éäº

æ£æ Â· AI ç¿»è¯

å å·ç ç©¶äººåé¦æ¬¡å©ç¨ OpenAI ç GPT-5.6 Sol åç°äºè¿ä¸æ¼æ´

Cloudflare å¨ PHP äº 10 æ 21 æ¥åå¸ä¿®å¤çæ¬ 8.5.12ã8.4.27ã8.3.36 å 8.2.35 ä¹åå°±å·²è§å¯å°æ»å»ã

å¼ç¨ Rohan Paul @ rohanpaul_ai

ä½¿ç¨ GPT-5.6 Sol çç ç©¶äººåå¨ PHP ä¸åç°äºä¸ä¸ªæå ¶ä¸¥éçæ¼æ´ï¼PHP é©±å¨ççº¦ 70% çç½ç«ï¼è¯¥æ¼æ´å¯¼è´ä¸»è¦ç½ç«ä¸çº¿ï¼è¿è¥æ¹çº·çº·ç´§æ¥ä¿®è¡¥ã åç°è¯¥æ¼æ´ç AI å®å ¨å ¬å¸ Calif å¨ä¸ä»½å£°æä¸è¡¨ç¤ºï¼å¦æä¸å°½å¿«ä¿®è¡¥ï¼è¿äºæ¼æ´å¯è½ä½¿å ¨ç 70% çç½ç«é¢ä¸´é£é©ï¼å¹¶ç§°å ¶ä¸ºâAI åç°çæä¸¥éæ¼æ´ï¼çè³å¯è½æ¯æ´ä¸ªè½¯ä»¶å²ä¸æä¸¥éçæ¼æ´âã > PHP ç´§æ¥åå¸äºä¿®å¤ç¨åºï¼å ä¸ºè¿äºæ¼æ´å¯è½è®©æ è´¦å·çæ»å»è æ¥ç®¡ Web æå¡å¨ã > ä¸¤ä¸ªæ¼æ´å¨ CVSS ä¸¥éæ§è¯åä¸åä¸º 9.2 åï¼å½±åä½è³ 5.4 ç PHP çæ¬ã > å½è¯·æ±å¨éè¯¯çæ¶æºè§¦å PHP çå åä¸éæ¶ï¼PHP ä¼éæ¾å åä½ä¿çæåè¯¥å åçæéï¼è¯¥å·¥ä½è¿ç¨ä¸åç»çè¯·æ±ä¾¿å¯å«æè¿åå åã > å®¡è®¡äººåå¨ 2024 å¹´åç°äºè¿ä¸å¼±ç¹ï¼ä½ä¿®å¤å·¥ä½åæ»äºæ°æï¼é¨ååå æ¯æ²¡æäººå±ç¤ºè¿å®é æ»å»ã > ç°ç± Google æ¥æçäºå®å ¨å ¬å¸ Wiz è¡¨ç¤ºï¼è¿äºæ¨¡åè®©ä¸åç ç©¶äººåå¨ä¸å¨å å®æäºè¿å»é¡¶å°å¢ééè¦æ°ææè½å®æçå·¥ä½ã > CVE ç¼å·çæ³é²è¿«ä½¿ PHP æåä¸å¤©åå¸ï¼Cloudflare ç®åæ¥åç§°å·²åºç°æ©ææ»å»å°è¯ã

åæ

Researchers using GPT-5.6 Sol found massively critical flaw in PHP, which runs about 70% of websites, knocked major sites offline as operators rushed to patch. Calif, an AI security firm, who found this, said in a statement that the vulnerabilities could put 70% of the worldâs websites at risk if they arenât patched quickly, and called them âthe most severe vulnerabilities ever discovered by AI, if not in all of software history.â > PHP rushed out fixes as it could let attackers without accounts take over web servers. > Both bugs score 9.2 on the CVSS severity scale and affect PHP versions as old as 5.4. > When a request hits PHPâs memory cap at the wrong moment, PHP frees memory but keeps pointers to it, which a later request on that worker can hijack. > Auditors spotted the weakness in 2024, but the fix stalled for months, partly because nobody had shown a practical attack. > Wiz, a cloud security company, now owned by Google, says the models let one researcher finish in a week what once took a top team months. > A leak of the CVE numbers forced PHP to ship a day early, and Cloudflare now reports early attack attempts.

å¨ X æ¥çè¢«å¼ç¨çå¸å

æ¥æºï¼ Rohan Paul Â· x.com

å®å ¨å¯¹é½

è¡ä¸å¨æ

#

å®å ¨/å¯¹é½

OpenAI

Google

NSA 就 AI 发现的 PHP2Shell 关键漏洞发布修复警告

TL;DR · AI 摘要

核心要点

NSA å°± AI åç°ç PHP2Shell å ³é®æ¼æ´åå¸ä¿®å¤è­¦å Â· AIHOT

NSA å°± AI åç°ç PHP2Shell å ³é®æ¼æ´åå¸ä¿®å¤è¦å Â· AIHOT