PHP2Shell, a pair of critical flaws in PHP, was one of them. Details leaked before the planned disclosure, frontier AI helped researchers find the flaws, and PHP shipped fixes the next day.
For many teams, though, the patch was the easy part. So what does it take to respond at that speed, and where should teams begin?
What does governed autonomous IT look like in practice? Software finds where a risk lives and ranks what matters most.
It proposes a fix, then, inside limits people define, carries it out and checks that it worked. Routine, low-risk actions can run on their own.
Higher-impact ones wait for a person to approve. A few are never handed over at all.
Each step leaves a record that someone can review and reverse. What challenges do IT and security teams face today?
PHP2Shell reportedly sat undetected for more than a decade. For these two flaws, the fix was a version upgrade.




