PHP2Shell cleanup is far from over, and experts warn of a 'vulnpocalypse'

Yesterday we looked at Wiz's report on PHP2Shell attacks. Now Wiz's CTO goes further on TechCrunch. The scare may have left your feed, he says, but the cleanup is far from over. Some organizations took sites offline until they could patch the two critical bugs in PHP, the language behind roughly 70% of websites.

His warning: a 'vulnpocalypse' is coming for the internet's aging code. AI now finds old bugs faster than humans can fix them. The Center for AI Safety newsletter makes the same point this week, with fears of a 'Hackpocalypse'.

And South Korea's financial institutions were hit by another wave of cyberattacks. TechCrunch links it to the growing risk of AI-driven hacking in Asia, but the input does not confirm AI was used here.