This must be black October for cybersecurity and webmasters. PHP2Shell have 2 critical vulnerabilities. PHP is a widely used scripting language in many websites and web applications, eg WordPress a popular website software. Some European websites went dark while administrators patch their software.
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151
Till date there has been no public announcement of these vulnerabilities being exploited. So a guy set up a website with a crypto wallet and the vulnerable PHP, eg honeypot. He was hacked in 19 hours.
In recent months there have increased use of AI to review code, revealing bugs and backporting of fixes.