La IA detecta un fallo que pone en riesgo hasta el 70% de las páginas web del mundo

PHP, the technology powering up to 70% of the world's websites, has revealed a significant security vulnerability that could be exploited by cybercriminals. The impact of artificial intelligence (AI) is being felt globally. Thanks to AI, these creators have uncovered a critical flaw in their software that malicious hackers could exploit to take control of any system running their technology.

Many website administrators have chosen to disable their portals as a preventive measure, as advanced AI systems could easily exploit this weakness. The vulnerability, dubbed PHPShell, involves multiple flaws in how PHP manages computer memory, allowing hackers to execute unauthorized software on any web server. The National Cybersecurity Institute (Incibe) has advised immediate system updates with new versions that address this vulnerability, along with temporary measures if immediate updates cannot be installed.

The Federal Office for Information Security (BSI) in Germany has warned of the threat of cyberattacks due to critical PHP language vulnerabilities, with many public institutions, businesses, and media outlets disabling their websites as a precaution. Japan has also issued an alert. The NSA highlighted that all organizations using PHP must prepare to install a patch that fixes two critical vulnerabilities.

OpenAI, in a blog post, noted their leadership in a coalition of researchers, security service providers, and other actors addressing PHP vulnerabilities over the past two months. The PHP development team led the creation of fixes and their release, with contributions from researchers, security service providers like Wiz and Cloudflare, and others in preparing protective measures before the vulnerabilities were made public.