Is the website down? What to know about the global PHP security scare

A major security scare has emerged surrounding the popular programming language PHP, with artificial intelligence uncovering critical vulnerabilities in the code as many websites went offline on Thursday. Created in the early 1990s, PHP powers an estimated 70% of the world's websites and is a key component of many web design platforms.

Security firm Wiz Research utilized AI to discover these flaws in PHP, which had been hidden for over a decade. The PHP Foundation has urged companies and organizations to update their systems immediately following the release of a patch on Wednesday.

AI has proven to be a powerful tool in detecting security flaws in PHP, with US tech giants OpenAI and Google utilizing advanced models to uncover vulnerabilities in August. Wiz and other groups kept this information confidential while a fix was developed. OpenAI described the flaws as "one of the most impactful vulnerabilities in recent memory," highlighting the new potential for AI to find security bugs with far-reaching consequences.

Despite the urgency, it is essential to recognize that not all websites have been compromised. The immediate risk of hacking after websites going dark does not necessarily mean they have been hacked, but rather is a responsible measure to ensure security updates are applied properly. However, some experts warn that some vulnerabilities might persist even after the patch has been implemented, particularly if third-party interfaces that use PHP remain unsecured.

The consequences of this security scare could be far-reaching, with potential data breaches leading to phishing attacks and compromised personal information. To mitigate these risks, Kerrison emphasizes the importance of implementing robust cybersecurity measures that include multiple layers of defense.