UK working to identify exposure after global cyber-security warning

The UK government is actively working to identify and patch potential cyber vulnerabilities in its online services following the discovery of flaws in the PHP programming language. This language underpins a significant portion of the world's websites. On Thursday, governments and major companies like Amazon scrambled to secure their systems before hackers could exploit these weaknesses.

The vulnerabilities were initially discovered by artificial intelligence, prompting urgent calls for websites to address the issue. Amazon was targeted in multiple attempts to exploit the vulnerabilities, revealing that it occurred before the embargo on the warning was lifted. The UK's National Cyber Security Centre (NCSC) and counterparts in the EU and Australia urged organizations to follow guidance to protect their systems.

They recommended taking systems offline if immediate remediation was not possible. Amazon disclosed on Wednesday that it had identified a PHP2Shell exploitation attempt on October 17th, involving an anonymous internet address attempting to target weaknesses in one of its decoy systems. The use of an anonymous IP address suggests a threat actor was involved.

The PHP Foundation was intended to release its discovery later in the month, but details leaked on social media, leading to subsequent attacks. The rapid disclosure of the vulnerabilities highlights how AI is transforming cybersecurity, making threats more frequent as technology improves. The PHP flaws had been undetected for at least a decade, and the flaws can potentially allow attackers to steal sensitive data, disrupt services, or gain deeper network access.