Create

Sign in to ReadmeX

or

How we handle your data: Privacy Policy

ReadmeX

Your AI reading companion

What would you like to catch up on?

Pick a briefing, or ask your own question.

Your community and people briefings stay personal to you.

Wiz Research

AI overview

Sign in and the AI will write an overview from our coverage.

Headlines · 3

  1. AI models help uncover chained PHP2Shell remote-code-execution flaws

    O’Reilly Radar, citing Wiz Research, reports that Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol helped uncover two chained PHP remote-code-execution vulnerabilities, later identified as CVE-2026-109618 and CVE-2026-109619. The PHP Foundation released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 and urged all installations to update, while sites unable to upgrade were advised to go offline and be isolated. The reported timeline also says Amazon apparently detected exploitation before the vulnerabilities were prematurely disclosed and patched.

    O’Reilly Radar · 🔥 0
  2. AI Accelerates Software Flaw Discovery as PHP Sites Rush to Patch

    AI models can now inspect code continuously and produce exploit programs within hours, sharply shortening the time defenders have to respond, according to cybersecurity experts quoted by IT之家. VulnCheck research reported that AI-assisted discovery doubled the number of vulnerabilities found over the past year, while the PHP vulnerability prompted government and other websites to patch or temporarily shut down. Cloudflare CEO Matthew Prince expects serious disclosures to create weekly security crises for two years, although experts disagree that AI will automatically produce a surge of successful attacks.

    IT之家 AI · 🔥 0
  3. PHP releases fixes for two critical unauthenticated RCE flaws

    PHP released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two critical flaws that can enable unauthenticated remote code execution under certain conditions. The PHP project said the bugs involve memory corruption and stale state in core memory-management and error-handling paths. Simon Willison’s Weblog and The Next Web reported that AI tools assisted vulnerability research and report validation, while the PHP Foundation retained human responsibility for selecting patches and assessing compatibility costs.

    Hacker News 首页（100+ 分） · 🔥 0

Experience and discussion from the community

Share my Wiz Research experienceAsk about Wiz Research

Nobody has shared their experience with Wiz Research yet.