PHP2Shell Is Real, the Internet Lockdown Is Not, and the…
By Tobi Opeyemi Amure
AI summary of the source article
Major US banks are restricting third-party AI agents inside customer accounts amid concerns over automated actions and deposit flight. Separately, two critical PHP vulnerabilities dubbed php2shell were patched following leaks, debunking rumors of wider financial market disruption.
Why it matters
Torsten Slok warned: “If every household used AI agents to optimise the return on their cash balances, banks could lose a large share of the cheap deposits they rely on to make loans, which would be a problem for the entire financial system.”
Key facts
- Morgan Stanley has begun blocking third-party AI agents, while JPMorgan, Bank of America, and Citi are restricting them from accessing customer accounts.
- JPMorgan, Bank of America, and Wells Fargo hold $1.6 trillion in non-interest-bearing deposits, representing 16% of their liabilities.
- Two PHP vulnerabilities known as php2shell (CVE-2026-109618 and CVE-2026-109619) were patched on 21 October, both rated 9.2 out of 10.
Source excerpt · FinanceFeeds
Two critical flaws in PHP, the language behind roughly 70% of all websites on W3Techs’ count, were patched on 21 October after details leaked ahead of the fix. The vulnerabilities are known together as php2shell, the US government has told organizations to patch immediately, and a viral account of what has followed is mostly wrong. Posts circulating on X this week describe an internet “lockdown,”…