PHP security flaws trigger global scramble; CERT-In flags vulnerabilities
Google Cloud executives Chris Betz, chief information security officer, and Raluca Ada Popa, head of Gemini Security at Google DeepMind, said PHP and cybersecurity firm Wiz Research disclosed the two vulnerabilities after research that used multiple AI models to identify and help remediate them. Google Cloud said its own infrastructure was not vulnerable, but warned that customers running PHP…
A global scramble has erupted following critical vulnerabilities discovered in PHP, a widely used open-source scripting language. The Indian Computer Emergency Response Team (CERT-In) has issued a critical-severity warning over two flaws that could allow unauthenticated attackers to execute malicious code remotely and compromise affected systems.
Microsoft CEO Satya Nadella described the scale of the incident as unusual, noting it was something he had not seen in a long time. Google Cloud executives have disclosed the vulnerabilities, which were identified using multiple AI models. Google Cloud itself stated that its infrastructure was not vulnerable but warned customers running PHP applications on the platform to update their applications to patched PHP versions and redeploy them.
The response has extended beyond India, with companies and government agencies in several countries temporarily restricting access to some online services as a precaution while they work to secure vulnerable systems.
Brief written by urgent.news from Times of India's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
