PHP zero-days exploited globally, forcing site takedowns after decade-long undetected flaws

Two critical PHP vulnerabilities, undetected for over a decade and discovered with AI assistance, triggered a global cybersecurity alert, forcing temporary removal of websites and services in multiple countries. The flaws were likely exploited in the wild, though the full scope and attribution remain unclear. This underscores systemic risk in widely deployed open-source software.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works