Cyber War 2026 (General)
PHP vulnerability found
This is a small taste of things to come. Much of the internet is held together by chicken wire and rotting twine and will be easy for AI to hack.
With the upcoming US election, this recent PHP development is particularly worrying. If one wanted to thwart an election, taking control of the infrastructure on which the election is conducted would seem to be a good place to start.
To say that PHP is ubiquitous on the Internet would be an understatement. It's not essential for the Internet and WWW to operate (like DNS and IP addresses), but it does form a foundation for much of what we see. It's right up there with HTML and Javascript with regards to processing what ends up on our screens.
An excerpt from https://www.theverge.com/tech/1015906/php2shell-vulnerability-october-2026:
How serious is it?
Very. The PHP Group says that basically any site running PHP is at risk. OpenAI, which was involved in the vulnerability research, said: “We consider this one of the most impactful security issues in recent memory.” And Wiz said it’s “among the most severe vulnerabilities discovered … in software history.”
Last night, the CTO of Cloudflare said that it was “seeing early attacks emerging.”
It’s hard to understate just how bad this could get. The vulnerabilities could allow an attacker to take full control of a server. That includes gaining access to passwords, API keys, cryptographic certificates, and databases of sensitive information. They could also execute code on those servers, turning them into vectors to attack other vulnerable servers. And, thanks to AI, it’s relatively trivial for a determined hacker to exploit these flaws now that they have been revealed.