PHP flaw shows AI ‘vulnerability apocalypse’ is on schedule: Immunefi CEO

PHP flaw shows AI ‘vulnerability apocalypse’ is on schedule: Immunefi CEO

Summary

Immunefi CEO Mitchell Amador warned that websites may remain exposed for weeks after PHP developers released emergency patches for two critical vulnerabilities, because site operators must upgrade independently. He urged users to avoid reusing passwords, be cautious when connecting crypto wallets, and revoke unfamiliar token approvals. Cloudflare CEO Matthew Prince reported millions of exploit attempts in the 24 hours after disclosure, plus thousands beforehand. PHP powers about 69% of websites using a known server-side language, and the FBI warned the flaws could enable remote code execution and compromise data and networks.