A recent cybersecurity event has highlighted the fragility of the web, with a critical vulnerability in the PHP scripting language putting nearly 80% of websites at risk of attack.
What happened
The vulnerability, known as PHP2Shell, was discovered by AI security company Wiz Research and has been found to have existed in PHP since 2004. The vulnerability allows hackers to break into websites without needing login credentials or special access.
A patch for the vulnerability is available, but experts warn that it may take time for developers to implement the update, leaving many websites vulnerable in the short term. Additionally, many websites running on outdated versions of PHP may not be able to be updated, leaving them at risk of attack.
Experts are warning that this is not an isolated incident and that future vulnerabilities are likely to be discovered as AI continues to be used to find defects in online cybersecurity.
To protect themselves, users are advised to take steps such as using a password manager, enabling two-factor authentication, and keeping their devices and software up to date. They are also advised to set up alerts for bank transactions, freeze their credit, and consider investing in an online identity protection service.
