InfoQ 中文T2·68 pts
- PHP disclosed two critical RCE vulnerabilities (CVSS 9.2), affecting ~70% of websites relying on the language.
- The vulnerabilities were discovered with AI assistance, intensifying industry anxiety over 'AI-driven attacks'.
- The incident exposes structural weaknesses in open-source supply chain security, prompting re-evaluation of critical infrastructure maintenance.