A decades-old PHP flaw threatens the web's infrastructure
In brief
- A critical flaw in PHP, used by 70 % of websites, was disclosed this week.
- Tech giants helped identify it using language models, but hackers already tried exploiting it.
- This flaw exposes the fragility of web infrastructure built on aging, under-maintained open-source tech.
A critical security flaw in PHP, a programming language used by 70 % of websites, was disclosed this week. According to the announcement, the vulnerability, present for decades, is so severe that site owners must either apply an immediate patch or take their sites offline to avoid exploitation risks.
Major tech companies like Google and OpenAI helped identify this flaw using language models to scan open-source software for vulnerabilities. Meanwhile, malicious actors have already attempted to exploit it, prompting governments and businesses to react urgently. Services like Cloudflare and Amazon reported hacking attempts before the public disclosure.
This situation highlights the fragility of the web's infrastructure, largely built on old and poorly maintained open-source technologies. Experts warn this flaw is likely just the first in a series, with risks increasing as AI tools become more accessible, making it easier to find and exploit similar vulnerabilities.
What it changes for you
- CybersecurityCybersecurity teams must urgently patch this PHP flaw and prepare for similar vulnerabilities in open-source software.
- Public SectorPublic administrations, often less equipped than large companies, face heightened cyberattack risks and must strengthen their defenses.
This summary gives you the essentials. The full article, its figures and quotes are on AI News & Artificial Intelligence | TechCrunch.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error