Two critical PHP vulnerabilities have prompted emergency software updates and a global security response. Here is what the flaws mean, how AI-assisted research contributed to their discovery, and what website operators should do next.