The PHP scare may have slipped from public attention, but the repair work is ongoing. Two critical bugs in the open-source language sent organizations scrambling to patch systems, while researchers warn that AI could speed up the discovery and exploitation of new vulnerabilities.
A security vulnerability in foundational PHP code has prompted a worldwide alert, leading governments and major companies to take websites offline. Andrew Chang explains how advanced AI found the flaw and the race between defenders and hackers to secure the system.
Security researchers at OpenAI and Google-owned Wiz used AI to find critical flaws in PHP, the open-source language behind roughly 70% of websites, including those built with WordPress, WooCommerce, and Magento. The vulnerabilities date back more than a decade. With a fix now available, companies are rushing to patch systems as attackers seek to exploit the flaws.
PHP, a programming language widely used in website development, powers nearly 70% of websites worldwide. Researchers recently used AI to uncover a serious security flaw, drawing concern from government agencies and businesses in several places. After the flaw was disclosed, some organizations temporarily shut websites or online services for security checks and updates. Government services or websites in the UK, the Netherlands, France and Finland were also affected. AI helped discover the flaw, but could also be used to find weaknesses in systems that can be attacked, changing the cybersecurity contest.
Millions of hacking attempts have been recorded since AI revealed vulnerabilities in PHP, a widely used programming language. DW’s Phil Gayle speaks with Ari Schwartz, executive director of the Center for Cybersecurity Policy and Law, about responsibility for the flaws, how long they have existed and who will repair them.
Justin Allen, a senior manager at cybersecurity firm Huntress, tells CNA that a newly disclosed PHP flaw puts organisations relying on the widely used language at risk. He explains why companies face greater exposure than consumers, how hackers could exploit vulnerable servers, and how years of poor software maintenance have made patching difficult for some organisations. He also discusses AI’s impact on cybersecurity.
Companies worldwide have temporarily taken websites offline after a newly identified vulnerability was found in PHP, which underpins about 70 per cent of websites globally. Before a fix was released, the bug leaked online and hackers were able to exploit it in some cases.
Researchers using AI found vulnerabilities in PHP that had gone undetected for more than a decade. The language is used on roughly 70% of the internet, and millions of websites are dealing with the potential threat. The head of the UK’s National Cyber Security Centre called the scale “unprecedented.”
Cybersecurity experts used AI tools to uncover a major flaw in PHP, a programming language behind many websites. Governments, businesses and other organisations worldwide are rushing to fix it, leaving many sites offline. Analysts say hackers have made millions of attempts using AI to exploit the flaw.
Organisations worldwide are racing to protect their websites after a flaw described as “unprecedented” was found in PHP, a programming language used across much of the internet. AI helped discover it, raising questions about how vulnerable the internet is.
Singapore’s cyber regulator warned that two critical PHP vulnerabilities could let hackers take control of exposed servers, steal sensitive data or disrupt services. It urged organisations to act immediately as businesses worldwide, including in Singapore, move to secure their systems.
Asian governments are rushing to address critical PHP security flaws after vulnerability details leaked online on Tuesday and hacking attempts increased. China urged organizations to check their systems and install the latest secure version, while Japan called for websites to go offline if fixes cannot be installed promptly.
Serious vulnerabilities in PHP, an open-source technology underpinning much of the internet, went undetected for more than a decade. AI brought them to light, prompting a global cybersecurity alert. BBC Cyber Correspondent Joe Tidy examines how AI found the issue, which companies were affected and hackers’ attempts to exploit it.
An urgent security fix has been issued for PHP, a programming language released more than 30 years ago that powers a large share of websites and web applications—estimated at 70% of all websites.
Two long-hidden critical flaws in PHP, a technology powering much of the web, triggered a global cybersecurity scramble. Researchers found the weaknesses could let attackers access servers and databases, prompting governments, hospitals and businesses to rush patches for vulnerable systems. TPO Group security chief and AI researcher Tarah Wheeler spoke to DW about the alarm surrounding the discovery.
Some government websites in Europe and elsewhere went offline after vulnerabilities in the widely used PHP programming language were uncovered with AI. Cybersecurity reporter Raphael Satter explains why.
Websites around the world have been taken offline after severe vulnerabilities were found in PHP, a programming language used across much of the internet. Governments and agencies are urging sites to fix the problem immediately. Cyber-security experts describe the AI-discovered flaws as the most severe the technology has uncovered.
Two critical vulnerabilities were found in PHP, a programming language widely used to run websites, prompting precautionary shutdowns of government websites and public services in Finland, the Netherlands, Belgium and the United Kingdom. An Antwerp hospital website is among the affected services.