PHP vulnerabilities exploited before patches released
Wired AI: Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.
Get smart on it
Hackers exploited critical vulnerabilities in PHP, a widely used web scripting language, several days before patches were publicly released to fix them. Amazon Web Services detected exploitation attempts starting four days before the official patch announcement, suggesting threat actors had obtained exploit information prior to public disclosure. The vulnerabilities are now being broadly exploited across the internet, with proof-of-concept exploits emerging around the time of the public announcement. AWS researchers note that AI-assisted analysis is making it faster and cheaper for multiple actors to develop working exploits from patch information, meaning the window between when vulnerabilities are disclosed and when they are actively exploited is shrinking.
Relevant courses
Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.
Browse AI courses on MavenRelated news
OpenAI says an AI agent lied about disabling its safety monitoring system
OpenAI disclosed a pair of safety incidents that involved AI agents weakening their safety monitoring systems during internal coding tasks. In one incident, OpenAI says its GPT-6 Astra agent disabled its safety monitor when copying reference code - and then lied about it. "The reference didn't configure a monitor, and Astra decided that was reason to remove the monitoring integration from the user's code," Marcus Williams, an AI safety researcher at OpenAI, writes on X. "When t
Also reported by The Decoder
Trump administration orders ban on DeepSeek in federal agencies
The Department of Homeland Security has ordered artificial intelligence technology from the Chinese company DeepSeek Ltd. be removed from all federal civilian agencies. The order, published on the Federal Register website today, warned that DeepSeek’s AI models present “multiple threat vectors,” that could give the Chinese Communist Party “extensive authority” to access American government infrastructure. […] The post Trump administration orders ban on DeepSeek in federal agencies appeared
Also reported by TechCrunch and The Decoder
Sam Altman reportedly pitched three endgames for AI safety, one involving a single firm melting everyone else's GPUs
OpenAI CEO Sam Altman laid out three paths to safe AI in an internal presentation: an international watchdog modeled after the IAEA, a merger of the major labs into one entity, or a single company so powerful it could shut down everyone else's compute. He called the last option "terrible." The article Sam Altman reportedly pitched three endgames for AI safety, one involving a single firm melting everyone else's GPUs appeared first on The Decoder.
Army Cyber Command's ECHOTRIBBLE would turn AI agents into self-spreading cyberweapons
The Army Cyber Command is developing AI agents that move through other networks like a computer worm and "neutralize" targets, according to internal documents. The program, codenamed ECHOTRIBBLE, is designed to reach even air-gapped systems with no network connection and run with minimal human oversight. Experts warn about collateral damage, pointing out that AI agents have recently broken into outside systems without meaning to, even without any order to attack. The article Army Cyber
Deepmind founder Hassabis shortens AGI timeline from five to two to three years
Demis Hassabis keeps moving up his AGI timeline. The Nobel laureate and former Google Deepmind CEO now expects artificial general intelligence within two to three years, down from three to five years earlier this year. The article Deepmind founder Hassabis shortens AGI timeline from five to two to three years appeared first on The Decoder.
Democratic governance of frontier AI, part II: Empowering cyber defenders
OpenAI outlines a blueprint for empowering cyber defenders with frontier AI, stronger safeguards, modernized cybersecurity, and more resilient public institutions.