Critical PHP and Next.js Flaws Collide With AI Supply-Chain Breaches

A cluster of critical software flaws and credential-focused breaches has put security teams under pressure to patch exposed services, rotate secrets and investigate supply chains. The week’s incidents ranged from PHP remote-code-execution flaws drawing millions of attempts to compromised releases of tools used to build and run AI applications.