PHP security flaws spark global cyber alert detected by AI
Artificial intelligence uncovers severe vulnerabilities hidden for over a decade in PHP, impacting millions of websites globally and triggering emergency fixes.
Stock photo for illustration only, not from the actual event
- AI helps discover critical security flaws hidden for over a decade in the PHP programming language.
- The discovery triggers a global cyber-security alert affecting countless platforms including Wikipedia and WordPress.
- Governments and organizations worldwide rush to take websites offline or deploy emergency patches.
- Experts warn of increased exploitation risks as technical details become publicly available.
Major security vulnerabilities have been uncovered in the PHP programming language, a core technology used globally since the 2000s to build websites. These flaws remained undetected for more than a decade until artificial intelligence was utilized to bring them to light, prompting a worldwide cyber-security alert on Wednesday.
Cyber-security firm Wiz described the flaws as the most severe ever detected using AI, while OpenAI called it one of the most impactful security issues in recent memory. PHP powers a vast array of online platforms that people interact with daily, including online shops, Wikipedia, and WordPress content management systems.
Stock photo for illustration only, not from the actual event
The vulnerability could allow attackers to gain unauthorized control over affected web servers and steal sensitive data. Paul Spain, chief executive of Gorilla Cyber Security, estimated that the flaw could impact millions of websites, noting that AI could make such attacks significantly easier and faster to execute.
"These risks are serious enough to require immediate patching across United States Government departments and agencies."
US Security Agency
The alert has caused global service disruptions across gaming platforms, government portals, and online forums. Wikimedia took down several systems as a precautionary measure, while authorities in Finland, the Netherlands, the UK, and Japanese Prime Minister Sanae Takaichi urged website operators to inspect their systems and apply emergency updates or temporary shutdowns.
This major discovery highlights the dual-edged nature of artificial intelligence in cyber-security. While advanced AI tools allow researchers to uncover deeply hidden software bugs far quicker than human analysts, malicious actors can similarly leverage automated analysis to exploit unpatched systems. The swift global response underscores the underlying vulnerabilities present in legacy internet infrastructure.
Researchers from Wiz and Calif identified the vulnerabilities using advanced code-analyzing AI tools. Although PHP developers have released software patches to fix the multi-year flaws, experts warn that malicious exploitation attempts are likely to rise in the coming weeks as detailed technical information leaks online.
Source: BBC Business
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment