Updated
Updated · CNN · Oct 26
P2PShell Flaw Exposes 70% of Websites as AI Reveals Decade-Old Exploit Path
Updated
Updated · CNN · Oct 26

P2PShell Flaw Exposes 70% of Websites as AI Reveals Decade-Old Exploit Path

3 articles · Updated · CNN · Oct 26

Summary

  • P2PShell affects the coding language behind about 70% of websites, giving attackers a way to run code remotely or access data on servers.
  • AI helped researchers finally map how to exploit vulnerabilities that had existed for more than a decade, turning long-known weaknesses into an actionable threat.
  • European government websites temporarily went offline this past week while applying patches, underscoring how urgently organizations are racing to update exposed systems.
  • Users have limited direct protection beyond fast software updates, strong unique passwords, passkeys or two-factor authentication, and avoiding AI-enhanced phishing links and messages.
  • The episode highlights how much of the internet still relies on aging infrastructure and how AI is accelerating both vulnerability discovery and more convincing cyberattacks.

Insights

How did a decade-old PHP flaw quietly spread across websites, NAS devices, and government systems before AI helped expose it?
With active exploitation already reported, what are the clearest signs a server was compromised through PHP2Shell before updates were installed?
If patching PHP is the only real fix, how many organizations still do not know where vulnerable runtimes are hiding?