remote code execution

Security firms confirm PHP2Shell breaches after patches

Three days after the PHP project shipped emergency fixes for two critical flaws known as PHP2Shell, the worst-case scenario of mass exploitation has not happened. The danger has not passed either. By late Friday, Palo Alto Networks and Trail of…

Cloudflare sees millions of PHP2Shell exploit attempts

Cloudflare tracked a fast rise in attacks after critical flaws in the PHP programming language became public. CEO Matthew Prince said attempts went from thousands to millions within hours. Government websites in Europe and Asia went offline as precautions while…

Zero-click flaw in top AI coding agents enables remote code execution

A zero-click remote code execution vulnerability affecting every major AI coding agent was disclosed Thursday by researchers at Air, a security startup focused on protecting enterprise AI systems. The flaw, dubbed "Plugin4Shell," bypasses the SHA-pinning mechanism that agents use to…