---
title: "AI Finds PHP2Shell: Web Security Risks | RinggCity"
description: "AI uncovers PHP2Shell, a critical PHP vulnerability. Also in RinggCity: DeepSeek restrictions, bank agent access, Parrot STT v2 and startup updates."
canonical_url: "https://www.ringg.ai/newsletters/ai-finds-php2shell-vulnerability"
type: "Article"
author: "Ringg AI"
published: "2026-10-30T13:24:09.000Z"
last_updated: "2026-10-30T13:24:09.000Z"
---

# When AI Finds a Flaw Hiding in Plain Sight

RinggCity 56th Edition | Published on 30 Oct 2026

Subscribe and join 10k+ builders in tech

## This week in AI

### 1 . Why is the US banning DeepSeek?

The US has ordered federal civilian agencies to remove DeepSeek and products built using its technology from government IT systems.

### 2 . Could an AI-discovered bug take websites offline?

AI tools helped uncover critical vulnerabilities in PHP, the programming language behind a large share of the web.

### 3 . Are AI agents accessing bank accounts without permission?

Major US banks are restricting third-party AI agents from accessing customer accounts amid concerns that agents could take actions beyond users' instructions.

## Our take

### When AI Finds a Flaw Hiding in Plain Sight

AI models have helped uncover PHP2Shell, a decade-old vulnerability in PHP that could allow attackers to execute code remotely. The flaw could affect an estimated 70-75% of websites globally, including those built on platforms like WordPress and Drupal, triggering an urgent effort to secure vulnerable systems.

The discovery highlights a growing shift in cybersecurity. AI can help researchers find weaknesses that have gone unnoticed for years, but those same discoveries can become opportunities for attackers if organisations don't patch their systems quickly. With so much of the internet relying on shared infrastructure, a single vulnerability can have consequences far beyond the original software.

## What's Ringging

### Parrot STT v2

Parrot v2 delivers better code-mixed transcription with native punctuation, eliminating the need for post-processing. It improves telephony call accuracy and cuts end-to-end latency by ~20%.

## AI product & startup updates

DeepSeek reportedly raises $15 billion to take on US AI labs

DeepSeek reportedly raised $15 billion to strengthen its position against leading US AI labs.

*   **Anthropic restricted access for 5-7% of its customers** over concerns that some users were extracting Claude's capabilities to train competing AI models.
*   **Legal AI startup Legora raised $550 million at an $8.8 billion valuation**, reflecting growing demand for AI tools that automate legal research and document review.
*   **OpenAI acquired biotech startup Orchestra Bio**, expanding its push into AI-powered biological research and drug discovery.
*   **Otter.ai secured $320 million in growth financing** to expand its enterprise meeting assistant business and international presence.

## Footnotes

AI agents got access to bank accounts.

Finally, someone else to blame for my spending.

![Internet-dependent AI meme in RinggCity Edition 56](https://images.prismic.io/ringg-ai/2QLDg7Lyzb145Ed4_RinggCityEdition56Footnotes.jpg?auto=format%2Ccompress&rect=0%2C0%2C600%2C906&w=1200&fit=max)

## More from Ringg City

[

### Does India Need Its Own AI for Financial Markets?

india ai model for financial markets | 30 Oct 2026

](https://www.ringg.ai/newsletters/india-ai-model-financial-markets)[

### The AI Boom Is Facing Its First Big Reality Check

ai boom reality check | 19 Oct 2026

](https://www.ringg.ai/newsletters/ai-boom-reality-check)[

### When AI Agents Start Looking Too Harmless

ai agents looking too harmless | 10 Oct 2026

](https://www.ringg.ai/newsletters/ai-agents-looking-too-harmless)

Book a Demo

Ready to deploy production-grade voice AI?

See how Ringg AI helps teams launch reliable voice agents across support, sales, operations, and industry workflows.

[Book a Demo](https://www.ringg.ai/book-a-demo)

Source: https://www.ringg.ai/newsletters/ai-finds-php2shell-vulnerability