Criminal hackers launched millions of attempts to exploit newly disclosed PHP2Shell flaws within hours, Cloudflare said. The PHP Foundation has seen no successful attacks, but Calif researchers used advanced AI models to turn vulnerabilities known for years into practical exploits in early August.