AI-Assisted Researchers Identify Critical Vulnerabilities in PHP
Technology & SocietyWell-covered
|
The Facts
- Researchers using AI models identified two critical vulnerabilities in the PHP programming language.
- PHP is widely used to build and operate websites and web applications.
- The PHP development team released security updates to address the vulnerabilities.
- Government cybersecurity agencies urged organizations using PHP to install the updates promptly.
- The vulnerabilities could allow attackers to execute code remotely on affected servers.
- Some websites and government services were temporarily taken offline during efforts to mitigate the vulnerabilities.
- Reports indicated attempts to exploit the vulnerabilities following or before their public disclosure.
Context
What is PHP?
PHP is an open-source programming language used on web servers to build and run websites and web applications, including platforms such as WordPress, Drupal and Joomla. USA Today NY Post BBC
Where Left and Right agree
Left and right largely agree on this one.
- What both sides accept
- Both frames agree organizations running PHP must install the security updates immediately, given confirmed remote-code-execution risk and active exploitation attempts.
- Where Left and Right differ in emphasis
- The left and the right both want PHP patched immediately, but they part on whose job it is to make that happen.
How left and right read it
Left says
When public services go dark to patch a flaw, the people cut off are the ones with nowhere else to turn. That is why the push from cybersecurity agencies to install the PHP updates promptly is a public-safety obligation, not an IT chore: the flaws allow remote code execution, and exploitation attempts were already reported. Patching is infrastructure. Who ensures AI-found holes get closed before they are weaponized?
“The disclosure further heightened concerns that have been building over the last six months about A.I.'s potential to upend cybersecurity unless security shortcomings are addressed.” — The New York Times
Is this how the left would actually put it?
Right says
A flaw letting attackers execute code remotely on servers running the software behind much of the web is not a matter for bureaucratic patience, because reports already show attempts to exploit it. That is why operators who raced to take systems offline rather than wait had the right instinct: the burden falls on every organization running PHP to act now, not to assume someone else's timeline will protect them.
“Major websites in Europe and the US were temporarily knocked offline Wednesday as operators raced to protect their systems from newly disclosed software vulnerabilities that could give hackers control of servers.” — New York Post
Is this how the right would actually put it?
Patching PHP fast matters to everyone — what differs is who owns that duty, the public system or each operator.
The receipts — 100 sources
Wire services (3)
Independent coverage (97)
The TelegraphCompanies scramble to fix cybersecurity flaws forcing websit...
MoneyControlInside the AI-driven cyber meltdown plunging global tech int...
Sözcü GazetesiDünyayı sarsan PHP depremi! e- Devlet ile ilgili kritik açık...
N-tvViele Seiten vorübergehend abgeschaltet: Bitkom: Praktisch j...
India TodayMore PHP-like cybersecurity issues coming, software supply c...
N-tvGefahr noch lange nicht gebannt: Was die PHP-Sicherheitslück...
Ouest FranceUne faille de sécurité détectée : de nombreux sites dont cel...
T-online.de"Rennen gegen die Zeit": Die Folgen der PHP-Sicherheitslücke
NewsweekFBI issues advice as security issue hits global websites
Hindustan TimesSecurity flaws in PHP programming language sparks worldwide ...
The Indian ExpressPHP security alert: What US and Indian government warnings m...
The Indian ExpressWhat is PHP2Shell, and why did it force websites around the ...
MoneyControlCERT-In flags 'critical PHP' flaws that could let hackers ta...
AolWhat is PHP and why did it spark a global cyber-security scr...
India TodayWhat is PHP and what is wrong with it? Full cybersecurity fi...
BBCGlobal scramble to fix critical cyber-security flaws as many...
AolUK working to identify exposure after global cyber-security ...
MoneyControlAI uncovers decade-old PHP bugs: Websites taken down worldwi...
Investing.comStock Market News - Investing.com
BBCUK working to identify exposure after global cyber-security ...
MoneyControlAI detects decade-old bugs putting millions of websites at r...
The GuardianWhat is PHP, and how bad is the computer language flaw causi...
BBCPHP: What is it and why did it spark a global cyber security...
India TodayPHP is cooked, US govt says patch or else shutdown and go of...
infobaeEmpresas y hospitales apagan sus páginas web tras detectar u...
News18Europe Takes Government Websites Offline After AI Uncovers C...
Hindustan TimesWeak web IDs and a decade-old PHP flaw. The week the interne...
CNBCCritical web security flaws spark global alarm as Google, Op...
TerraFalha de segurança revelada por IA provoca "apagão" em sites...
BBCCouncils and NHS boards take websites offline after security...
USA TodayA basic explanation of the 'critical' PHP flaw
EL MUNDOAsí es PHP2Shell, el fallo que amenaza a siete de cada diez ...
HürriyetSiber Güvenlik Başkanlığı'ndan ulusal çapta siber güvenlik u...
TerraSites em vários países são desativados após IA detectar falh...
РИА НовостиOpenAI заявила, что ее ИИ-модели нашли уязвимости у большинс...
BBCSites em vários países são desativados após IA detectar falh...
infobaeOpenAI detecta con IA dos fallas críticas de PHP antes que l...
EL MUNDOEspaña también recomienda actualizar de inmediato PHP tras d...
Le Figaro.frQu'est-ce que PHP, ce langage informatique qui a fait vacill...
NewsweekPHP vulnerability sparks scramble as major websites face thr...
The New York TimesA.I. Discovered a Critical Security Flaw Underpinning Websit...
AolUrgent security fix issued for code vital to estimated 70% o...
The GuardianFlaw in PHP computer language leads to shutdown of websites ...
MoneyControlGovernment websites in Europe, elsewhere go offline after AI...
New York PostMajor websites in US and Europe go dark as operators race to...
BildPHP-Sicherheitslücken: Die nächsten 24 Stunden sind entschei...
infobaeMinisterios, hospitales y medios de Bélgica desconectan sus ...
infobaeAlerta mundial ante las vulnerabilidades que ponen en grave ...
La Repubblica.itPHP2Shell, l'IA svela due falle critiche nel web
La NacionAlerta global por fallas de seguridad en internet: desconect...
Yahoo!Alerta global por fallas de seguridad en internet: desconect...
TerraDesenvolvedores do PHP lançam correções de vulnerabilidades;...
TerraSites de governos ficam fora do ar após falha detectada por ...
infobaeEl INCIBE se suma a las alertas ante las vulnerabilidades de...
N-tvDer Tag: Deutsche Behörden gehen wegen Cyberangriffen vom Ne...
Le Monde.frWebsites worldwide go dark as AI exposes security flaws
Hindustan TimesGovts in Europe take down sites, US urges fix after AI disco...
EL PAÍSDos vulnerabilidades críticas detectadas con IA provocan fal...
tagesschau.dePHP-Bedrohung: Was über die Sicherheitslücke bekannt ist
Yahoo!Una vulnerabilidad en un lenguaje de programación obliga a d...
uol.com.brIAgora?: IA descobre falha capaz de derrubar 70% da web; sit...
TerraO que é o PHP e por que sites de governo saíram do ar na Eur...
РИА НовостиВо Франции ряд госсайтов перевели в режим техобслуживания
BBCПо всей Европе отключаются правительственные сайты в преддве...
infobaeEEUU evalúa ya el impacto de la vulnerabilidad PHP en sus in...
NDTVGovernment Websites Go Dark Worldwide After Major Flaws Foun...
infobaeLa autoridad alemana de seguridad informática alerta ante la...
EL MUNDOLa IA detecta un fallo que pone en riesgo hasta al 70% de la...
USA TodayAI finds critical flaw in software powering most of nation's...
infobaeJapón emite una alerta urgente por vulnerabilidades del leng...
India TodayGovernment websites go offline across Europe after critical ...
Ouest FranceDes sites web du monde entier, exposés à deux failles de cyb...
EL MUNDOPáginas web gubernamentales de varias partes del mundo dejan...
AolWebsites taken down across Europe as critical cyber-security...
Le Monde.frFailles PHP : pourquoi de nombreux sites ont soudainement ét...
N-tvSachsen: Weltweite Sicherheitslücke - dresden.de abgeschalte...
Le Figaro.frUne partie de l'Internet mondial mise à l'arrêt après la déc...
Investing.comPHP patches critical flaw hitting 70% of websites; Cloudflar...
MoneyControlAI discovers critical bug that could put 70% of world's webs...
tagesschau.deIT-Sicherheit: Sicherheitslücke bedroht weltweit Webseiten
Yahoo!PHP reconoce falla de seguridad y publica parche para evitar...
GMXKritische Sicherheitslücke bedroht Millionen Websites weltwe...
The Wall Street JournalExclusive | AI Just Found a Bug That Puts Up to 70% of the W...
infobaePHP lanzó parches de emergencia para dos fallas críticas que...
AolCritical vulnerabilities in commonly used web code spark rus...
NBC NewsCritical vulnerabilities in commonly used web code spark rus...
BildPHP-Sicherheitslücken: Behörden nehmen Webseiten vom Netz
The TelegraphWebsites go offline after critical security glitch
T-online.deGravierende Sicherheitslücke: Städte nehmen alle Online-Dien...
N-tvHacker starten Angriffe: Kritische Fehler in Programmierspra...
N-tvHacker starten Angriffe: Zahlreiche Websites wegen PHP-Siche...
BBCCyber chiefs tell websites to make critical safety update or...
infobaePaíses Bajos desconecta webs del Gobierno y el Parlamento po...
India TodayPHP warns of major security flaws, announces emergency relea...
ForbesCritical PHP Security Warning Issued -- Apply Emergency Patc...
ForbesOpenAI Says AI Found One Of The Biggest Web Weaknesses Ever
Business InsiderA major security flaw found using an OpenAI model is causing...
The news, read by both sides.
The day’s biggest stories in one short brief, built to show both sides and the competing values behind the headlines. Free in your inbox.