Calif Uses AI to Find PHP2Shell Vulnerability

Cybersecurity firm Calif discovered a long-dormant vulnerability in PHP, an open-source coding language used by approximately 70% of global websites. Researchers at the firm identified the bug, which they dubbed PHP2Shell, by utilizing frontier AI models to determine the extent of the security risk.

Led by CEO Thai Duong and engineer Bruce Dang, the firm partners with major AI laboratories and neocloud providers to test models and identify infrastructure vulnerabilities. The discovery demonstrates the ability of AI to uncover critical security flaws that had previously remained undetected in widely used software.

Thai Duong and Bruce Dang detailed the discovery process, noting the evolving nature of cybersecurity risks as AI continues to integrate into the field.