‘Black October’: AI-Discovered Flaws Put Global Cybersecurity on Alert

Two critical security flaws in PHP, a programming language used by websites worldwide, were disclosed on October 21 after remaining unnoticed for over a decade. These flaws, known as PHP2Shell, could allow hackers to infiltrate vulnerable servers and gain full control without needing a password or account. Security agencies urged organizations to update their systems promptly, as researchers had already detected attempts to exploit these weaknesses.

This discovery marked a turbulent month for cybersecurity, earning the nickname 'Black October' due to the growing number and variety of incidents. AI is playing a role in both uncovering and exploiting software weaknesses. Researchers at cybersecurity firm Wiz, aided by AI tools, discovered the PHP2Shell flaws and demonstrated their potential to compromise WordPress, Drupal, and Joomla websites.

In one week, AI models like Google's Gemini and OpenAI's GPT helped researchers identify complex programming errors and create working demonstrations of potential attacks. However, AI also enables attackers to develop and adapt hacking methods more quickly, reducing the time organizations have to protect vulnerable systems. On October 21, PHP released security fixes to address the flaws, urging website operators to update their systems immediately.

The vulnerabilities have a critical severity rating of 9.2 out of 10. The PHP incident highlights the pressure organizations face as AI-assisted research shortens the time between discovery and exploitation. While AI can strengthen defenses by helping security teams identify weaknesses before attackers exploit them, the challenge lies in ensuring that organizations can apply fixes at the same speed.