What to know about the AI-detected security bug impacting wide swaths of the internet
(AP) -- The language that's known as the backbone of the internet is now subject to what experts describe as one of the most notable vulnerabilities i
The language known as PHP, a scripting tool widely used for web development, has recently been plagued by a significant security flaw. The PHP Foundation and the FBI's cybersecurity division issued warnings regarding the vulnerabilities, prompting a swift response from government agencies, corporations and other organizations globally. These flaws could enable malicious actors to gain unauthorized access to sites running PHP, allowing them to manipulate data or launch additional attacks without a password.
The PHP Foundation reported that the vulnerabilities could affect approximately 70% of websites worldwide, given PHP's prevalence. This includes content management systems like WordPress and Drupal, often utilized by governmental entities, as well as Wikipedia's MediaWiki software. Due to the severity of the issue, several websites have been taken offline for patching while others remain inaccessible as multiple fixes are being developed, tested and applied.
The delay in addressing these vulnerabilities, spanning back to at least 2024, has been attributed to a lack of resources and a cumbersome decision-making process within the security team. Experts suggest that the discovery of the flaws might have been identified earlier, had artificial intelligence agents been involved more extensively.
AI has proven instrumental in identifying vulnerabilities, testing fixes and validating their effectiveness. While this technology offers an edge to defenders, it simultaneously amplifies the scale and speed at which bad actors can exploit weaknesses in digital systems.
AI's involvement in this situation has been both a boon and a bane, with defenders grappling with the challenges posed by the invaders. Despite the setbacks, experts like Charl van der Walt of Orange Cyberdefense remain optimistic, emphasizing the potential for AI to facilitate the discovery and resolution of critical security issues. However, the ultimate solution lies in finding robust, tested and approved alternatives that effectively patch and protect digital systems from potential threats.
Written by urgent.news from The Mainichi's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
