Skip to footer
Technician with laptop working on server rack at NERSC
Photo: Illustrative image — Photo: CC0 1.0, via Wikimedia Commons

tech

AI-Exposed PHP Security Flaws Cause Website Outages

AI-exposed PHP security flaws caused website outages as government agencies and companies shut down systems.

Updated 1 min read

Key points

  • Two critical security flaws were discovered in PHP, a programming language used by an estimated 70 percent of the world's websites.
  • The US National Security Agency advised organizations to either patch their systems immediately or pull them offline.
  • Only websites that run PHP on their own servers are exposed to these vulnerabilities.

Why it matters. The flaws potentially affect a vast range of websites, including online stores, news outlets, and government services.

Government agencies and companies worldwide shut down websites on Wednesday following the discovery of two critical security flaws in the PHP programming language. The security firm Wiz described these as some of the most severe vulnerabilities in software history. The US National Security Agency has instructed organizations to patch systems immediately or take them offline.

Latest updates

AI-Exposed PHP Security Flaws Cause Website Outages

AI tools have identified significant weaknesses in PHP, a core language for numerous web design platforms. These flaws have led to immediate outages as administrators take sites offline to prevent exploitation. Because PHP is widely used, the potential impact spans a vast range of global websites. Security teams are racing to patch the vulnerabilities. The incident demonstrates the dual role of AI in both discovering and potentially exploiting software bugs.

Cyber Agencies Warn of Global Website Outages Over PHP Flaws

Two critical vulnerabilities have been identified in PHP, a programming language used across large parts of the global internet. Cyber agencies warn that websites running the software may go dark as developers rush to implement critical fixes. The flaws have triggered a rare and urgent global cyber-security response. Technical teams are currently working to patch the vulnerabilities to prevent widespread exploitation.

Sources

Topics