What happened
A global cyber-security alert has been issued due to vulnerabilities in the PHP programming language, which is used by 70% of the world's websites. The vulnerabilities, known as "php2shell," were discovered by cyber-security researchers using advanced AI tools and have been described as the "most severe" ever detected by AI.
The PHP Foundation has rolled out patches to fix the vulnerabilities, and authorities and security organizations around the world have urged website operators to install the emergency fixes or take their platforms offline. The US National Security Agency has warned that the flaw could provide a "direct path" to exploit a system's database, and the UK's National Cyber Security Centre has advised organizations to check for "backdoors installed by an attacker."
The vulnerability affects back-end website and web development processes, which will be invisible to many users. However, small businesses with sites, including those built using WordPress, may be at risk. Website operators have been urged to secure their websites by updating to the latest version, and users have been advised to stay alert for any security advice issued by affected services.
Cyber-security experts have warned that the vulnerability could leave poorly maintained websites at greater risk, particularly those belonging to smaller organizations with limited security resources. The incident highlights the importance of AI in uncovering security flaws, but also the potential for AI to be used by attackers to develop offensive tools and exploits.
