Websites down: what is PHP and how has it raised AI hacking fears?

Artificial intelligence has uncovered critical security flaws in PHP, the programming language behind an estimated 70% of the world's websites. As a result, many websites went offline on Thursday while organizations worldwide raced to patch the vulnerabilities. Wiz Research, a security firm, used AI to identify the hidden weaknesses in PHP for over a decade before revealing them.

The PHP Foundation urged companies and organizations to update their systems immediately, but despite the fix, some websites remained inaccessible as developers worked to protect their code. Internet giants like OpenAI and Google utilized cutting-edge AI models to discover the security flaws in August, keeping the information secret until a solution was found.

Security experts warn that the ease with which AI can expose vulnerabilities poses a significant risk, as malicious actors could weaponize this information quickly. While larger institutions may swiftly resolve the issue, smaller sites and individuals may remain vulnerable for days, weeks, or even months. The interconnected nature of online systems means that some exposure could persist even after the fix. To ensure comprehensive cybersecurity, experts advise implementing multiple layers of defense.