AI 发现危及全球七成网站的 PHP 严重漏洞，白宫今日发声明加速推动修复
华盛顿讯 据《今日美国》10月21日报道，白宫当日发表声明称，特朗普政府正与联邦机构及人工智能公司合作，「加速」向 PHP 开源软件用户推送安全修复补丁，以保护美国网络与关键基础设施。政府于10月16日（上周五）接到漏洞通报，该漏洞由 AI 技术发现，波及支撑全球七成以上网站运行的 PHP 开源软件；谷歌旗下网络安全团队 Wiz 也独立发现并上报了同一漏洞。
白宫在声明中强调：「特朗普总统致力于确保美国在超级智能（Super Intelligence）领域引领世界，而这一发现正说明美国在该领域领导地位的关键意义——先进的超级智能技术帮助发现了网络安全漏洞，使专家得以开发缓解方案，避免了广泛的网络中断。」特朗普一向主张美国在 AI 领域保持全球领先，并反对对快速发展的 AI 行业实施严格监管。
业界将该漏洞称为「PHP2Shell」。由于 PHP 支撑着全球大多数网站的后端运行，一旦被利用，可能造成大范围的网站瘫痪与数据泄露。PHP 基金会已于10月21日发布修复版本，网络安全与基础设施安全局（CISA）敦促所有使用 PHP 的网站立即更新；监测机构已经报告出现利用该漏洞的攻击尝试。
AI Finds Critical PHP Flaw Affecting 70% of Websites; White House Moves to Expedite Fix
Washington — The White House said in a statement on October 21 that the Trump administration is working with federal agencies and artificial intelligence companies to "expedite the release" of a security fix to users of the PHP open-source software, to protect American networks and critical infrastructure, USA Today reported. The administration was notified of the vulnerability on Friday, October 16. The flaw, discovered through AI technology, affects the PHP software that powers about 70 percent of the world's websites. Wiz, Google's cybersecurity team, also independently discovered and reported the same vulnerabilities.
"President Trump is committed to ensuring America leads the world in Super Intelligence, and this discovery demonstrates exactly why American leadership in SI is so critical," the White House said. "Advanced SI technology helped identify a cybersecurity vulnerability, allowing experts to develop a solution that would mitigate widespread disruptions." Trump has consistently argued that the United States must maintain global leadership in AI and has opposed strict regulation of the fast-growing industry.
The flaw has been dubbed "PHP2Shell." Because PHP runs the back end of most of the world's websites, exploitation could cause widespread outages and data breaches. The PHP Foundation released patched versions on October 21, and the Cybersecurity and Infrastructure Security Agency (CISA) urged all PHP-based websites to update immediately; monitoring firms have already reported attempted exploits.
来源：GSM·美国（原文链接）
图片来源：图：数据中心服务器机房（示意图）。BalticServers.com 摄，CC BY-SA 3.0，经维基共享资源。
- 2026-10-21 12:34AI 发现危及全球七成网站的 PHP 严重漏洞，白宫今日发声明加速推动修复本篇
- 2026-10-22 23:11荷兰议会与国家网络安全中心网站10月21日预防性下线：PHP严重漏洞引欧洲警报
- 2026-10-22 00:03跟进：PHP严重漏洞披露后数小时利用尝试达数百万次 欧洲多国政府网站一度下线 三菱UFJ暂停部分网络服务
- 2026-10-22 23:00跟进：PHP漏洞冲击扩大：英国确认32项政府服务预防性下线 大臣称未发现中央系统被攻破
- 2026-10-23 00:23跟进：PHP2Shell处置进入第二天：美三机构联合通告列明清点与下线要求，美国全国作家联盟预防性关闭官网
