AI-discovered PHP flaws trigger global security warnings
The issue, known as PHP2Shell, led to emergency patches for two vulnerabilities that could enable remote code execution.
On Wednesday, government websites across Europe and other regions went dark after a critical flaw in the widely-used PHP programming language was discovered. AI-powered cybersecurity firm Wiz uncovered the vulnerabilities, which had been lurking in the code for years, and released urgent fixes. With hackers already exploiting the flaws, organizations took precautionary measures, including shutting down sites.
PHP, developed in the 1990s and used by WordPress, Drupal, Joomla, and Magento, underpins a significant portion of the internet. Experts predict a wave of intrusions as the flaw is now public and AI can reverse engineer the bugs. Major cybersecurity agencies in Europe, Australia, Japan, and the UK urged PHP users to update immediately or take sites offline.
Even tech giants like Google, Amazon, and Microsoft assisted in mitigating the risks. The Dutch cybersecurity agency went offline as a precaution, and Wikipedia also disabled some systems for safety. The White House acknowledged the flaw, emphasizing the importance of AI leadership in national security. Smaller websites, lacking technical resources, were particularly vulnerable and could remain exposed for an extended period.
Written by urgent.news from Dawn's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Government websites go dark after AI-discovered flaw sparks security scramble dawn.com
- Government websites go dark after AI-discovered flaw sparks security scramble dailymaverick.co.za
- Government websites go dark after AI-discovered flaw sparks security scramble thejakartapost.com
- Government websites go dark after AI-discovered flaw sparks security scramble japantimes.co.jp
