AI helped uncover a hidden PHP flaw. Now websites worldwide are facing millions of hacking attempts.
A critical PHP vulnerability has triggered millions of exploit attempts worldwide. AI tools helped researchers uncover the flaw, leaving governments and companies racing to patch vulnerable websites.
A hidden flaw in PHP, the programming language powering nearly 70% of websites worldwide, has been uncovered by security researchers aided by artificial intelligence. Dubbed PHP2Shell, this critical vulnerability could allow attackers to take control of web servers, steal data, or disrupt online services. The flaw, discovered on August 1, has since triggered millions of hacking attempts across the globe.
Cloudflare CEO Matthew Prince reported that attack attempts surged from tens of thousands within 45 minutes to millions overnight after the flaw became public. Websites running WordPress, Wikipedia, Slack, Drupal, and other services have been particularly affected.
Security firms Wiz and Calif independently identified the flaw, with Wiz crediting its AI tool for uncovering the complex chain of steps needed to exploit it. The National Security Agency (NSA) has warned that attackers could exploit the vulnerability to hijack servers, steal sensitive data, and infiltrate networks. In response to the crisis, organizations are being advised to patch their systems immediately or temporarily take affected services offline.
The UK government took 32 services offline as a precaution, while the National Cyber Security Centre issued 50,000 alerts to at-risk companies and institutions. Notable platforms like Wikipedia, the Internet Archive, and 4Chan reportedly went down as a result of the vulnerability.
Authorities have urged governments, companies, and individuals to prioritize patching their PHP-based systems to mitigate the risk. However, older systems that cannot be easily patched may require replacement. Microsoft has introduced Copilot, an AI-powered coding assistant aimed at simplifying app development for users of all skill levels.
Meanwhile, US banks are grappling with a new digital threat from AI agents attempting unauthorized actions within customer accounts, highlighting the evolving landscape of AI-related security challenges.
Written by urgent.news from Digital Trends's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
