Researchers at cyber-security firms Calif and Wiz used advanced artificial intelligence tools to identify critical vulnerabilities in PHP, a programming language that has underpinned much of the internet since the 2000s. The flaws, which had remained undetected for more than a decade, could allow attackers to gain unauthorized access to web servers and steal sensitive data. PHP powers a vast array of platforms including Wikipedia, WordPress, e-commerce sites, and government portals, meaning the vulnerabilities potentially affect millions of websites globally.
The discovery was announced on Wednesday, prompting an immediate international response from governments and cyber-security agencies. The PHP platform’s developers released emergency patches, and authorities worldwide have urged website operators to install the fixes immediately or take their systems offline as a precautionary measure. Multiple high-profile organizations, including Wikimedia, the Finnish government, Edinburgh council, and the BBC, have taken their websites offline in response to the threat.
Cybersecurity experts warn that the vulnerability poses particular risks to smaller organizations with limited security resources, as poorly maintained websites are more likely to remain unpatched. Amazon reported being targeted in multiple attack attempts days before the public disclosure, raising questions about how potential attackers learned of the flaw. Cyber-security researcher Salil Kanhere from UNSW Sydney cautioned that more exploitation attempts are likely in coming weeks now that technical details are public.
The incident underscores both the potential benefits and risks of artificial intelligence in cybersecurity. While AI tools enabled researchers to identify flaws much faster than traditional methods, experts note that attackers could similarly use AI to develop offensive tools and exploits. The US National Security Agency and similar agencies in the UK, EU, Singapore, Australia, and Japan have all issued alerts urging organizations to prioritize immediate patching and maintain heightened vigilance in the coming weeks.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI