tech
AI discovers unprecedented security flaw in PHP programming language
AI discovered unprecedented security flaws in the PHP programming language
Key points
- AI discovered critical vulnerabilities called php2shell in the PHP programming language.
- Wiz reports that PHP powers 70% of the world's websites, including Wikipedia and WordPress.
- The PHP Foundation warned that the flaws are inherent in the language and affect many versions.
Why it matters. The vulnerabilities affect a language used by 70% of the world's websites, potentially impacting a wide array of online platforms.
Artificial intelligence discovered critical security flaws, coined "php2shell", in the PHP programming language. Cyber-security firm Wiz reported that these vulnerabilities are inherent in the language, which powers 70% of the world's websites. The PHP Foundation warned that the flaws affect many versions of the language.
Latest updates
AI discovers unprecedented security flaw in PHP programming language
A critical cybersecurity flaw has been discovered in the PHP programming language, which serves as the backbone for millions of websites. The vulnerability was identified using artificial intelligence tools. Experts describe the potential scale of the flaw as unprecedented. Despite the severity, there is currently no evidence that the vulnerability has been exploited by hackers. Some business owners have reported temporary online service disruptions, though it remains unclear if these are linked to the flaw.
Govts in Europe take down sites, US urges fix after AI discovers flaw in programming language PHP
The US National Security Agency urged organisations using the software to install the updates immediately or take vulnerable systems offline. Government agencies around Europe and elsewhere shut down websites on Wednesday after two critical flaws came to light involving PHP, a programming language that is the basis for a large share of the internet.Developers of the PHP programming language said a set of new updates fixing two previously identified critical vulnerabilities was now live, and acknowledged a delay in addressing a previously identified flaw.The US National Security Agency urged organisations using the software to install the updates immediately or take vulnerable systems offline.“Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommended that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance,” it said in a post on X.Websites could be vulnerable to attack: PHPThe PHP Foundation, which oversees development and maintenance of the software, addressed the flaws as a “structural failure” and said that these releases fix.
US urges fixes after AI finds critical flaws in PHP programming language
Government agencies around Europe and elsewhere shut down websites on Wednesday after two critical flaws came to light involving PHP, a programming language that is the basis for a large share of the internet. Developers of the PHP programming language said a set of new updates fixing the two previously identified critical vulnerabilities was now live. The US National Security Agency urged organisations using the software to install the updates immediately or take vulnerable systems offline. The flaws were discovered with the help of artificial intelligence.