AINewsnow

AI agent skills for PHP2Shell: what each one checks

This story is from 2026-10-23. It is preserved in the archive; the latest stories are on the live feed.

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of flaws in PHP itself. The PHP project fixed them on 21 October 2026 in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 ( php.net advisory ). Within two days, several teams published skills for coding and operations agents (Claude Code, Codex, Devin…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-23 18:34 · DEV Community — AI
    AI agent skills for PHP2Shell: what each one checks

More stories

  1. Kimi K3.1 Pro and Kimi K3.1 Pro Highspeed are available now in AI Gateway — Vercel Blog
  2. Anthropic says it partnered with Theorem to use Claude to formally prove useful security properties at the assembly code level across 123 open-source libraries (Anthropic) — Techmeme
  3. OK, fine, Qwen 3.8 Flash Next is nice — r/LocalLLaMA
  4. Anthropic Joins the A.I. Agent Race With Claude Duet — New York Times Technology
  5. KFlash: Benchmarks of newly released versions of Apple Silicon optimized engines: 1.4.0 Splash (DFlash2 ~ 50 tok/s) vs 0.2 Kapitsa (KFlash ~65 tok/s), MLX(MTP) & more on Qwen 3.8 27b/4b/35b 4Q on Macbook Pro M4 Pro 48 GB 2024, 48GB & Macbook Pro M1 Pro 16GB 2021 — r/LocalLLaMA
  6. Kimi K3: A Claude clone or something else? — CoreWeave Blog
  7. What Is LLM Inference? How AI Models Generate Responses — IBM Technology (YouTube)
  8. Anthropic joins Meta and OpenAI’s personal AI assistant race with Duet — Fortune AI

Get the daily brief of stories like this at 6:30 every morning →