AI Is Finding Vulnerabilities Faster. Can Cybersecurity Keep Up?
Artificial intelligence is transforming cybersecurity, uncovering long-hidden software weaknesses and challenging organizations to rethink how they prepare for emerging threats.
What happens when technology can uncover a security weakness that’s been hiding in plain sight for more than a decade?
We’re beginning to find out.
In October 2026, researchers disclosed two critical vulnerabilities in PHP, an open-source programming language powering websites and applications worldwide. Known collectively as PHP2Shell, CVE-2026-109618 and CVE-2026-109619 received severity scores of 9.2 out of 10 and could allow attackers to execute malicious code on vulnerable servers without logging in.
According to Wiz Research, its team used AI tools, including Wiz Atlas, Google’s Gemini 4 Argon, and OpenAI’s GPT-5.6 Sol, to investigate the weaknesses, develop working exploits, and validate fixes. Wiz also collaborated with OpenAI, Calif, and PHP maintainers during the coordinated disclosure process.
During Cybersecurity Awareness Month, the discovery raises an important question: Can organizations keep pace with AI-driven vulnerability discovery?
AI Is Changing the Security Equation
AI can analyze complex code, identify weaknesses, and help researchers investigate threats more efficiently. In the PHP2Shell investigation, AI helped turn longstanding software flaws into working exploits that previously would have required extensive specialized effort.
That’s a powerful advantage for defenders. But attackers may use similar capabilities to discover vulnerabilities and develop exploits.
As AI lowers the barriers to finding and exploiting security weaknesses, organizations may have less time to respond.
Speed matters, but preparation matters more.
Cybersecurity Is a Workforce Challenge
PHP2Shell demonstrates why responding to a vulnerability isn’t always as simple as installing a patch.
The flaws exist within PHP itself, meaning even applications with secure code can be exposed. Organizations running older, unsupported PHP versions may also need to upgrade their software or obtain fixes from long-term-support vendors.
That requires knowing which systems use affected software, assessing the risks, prioritizing updates, and coordinating changes without disrupting operations.
It’s work that extends across development, security, operations, and leadership.
The Cybersecurity Skills Fram
ework, developed by the Open Source Security Foundation (OpenSSF) and Linux Foundation Education, helps organizations identify critical capabilities across 14 core IT job families and three skill levels, uncover skills gaps, and prioritize workforce development.
It’s a practical approach to strengthening security readiness across an organization, rather than relying on technology alone.
Turning Awareness Into Action
Effective cybersecurity begins long before a vulnerability makes headlines. Secure development practices, ongoing risk assessment, and coordinated response plans help organizations address threats as they emerge.
Linux Foundation Education offers training to strengthen these capabilities:
- Secure AI/ML-Driven Software Development (LFEL1012): Get started with free, approximately one-hour training on using AI-assisted development tools securely while reducing potential risks.
- Developing Secure Software (LFD121): Learn secure coding practices to identify vulnerabilities and build more resilient software.
- Threat Modeling: The Essentials Toolkit (SKF201): Learn to identify and assess security threats using proven frameworks, practical tools, and AI-driven threat modeling techniques.
- Implementing DevSecOps (LFS262): Integrate security throughout the software development lifecycle to identify and address risks earlier.
Cybersecurity Awareness Month reminds us that protecting our digital infrastructure takes more than awareness. It requires action, collaboration, and continuous learning.
As AI reshapes cybersecurity, building the right skills is essential to staying ahead of emerging threats.
