PHP released emergency fixes on Wednesday for two critical flaws that let attackers take over web servers. Security firm Wiz found them using OpenAI and Google models, and every recent PHP version is affected. Details leaked early and attacks have already begun, so site owners are urged to update now.