OpenAI Discovers Critical PHP Vulnerabilities Affecting 70% of Websites

iconCoinEdition
Share
AI summary iconSummary
OpenAI has uncovered critical smart contract vulnerabilities in PHP, dubbed PHP2Shell, which could expose 70% of websites to remote code execution. The flaws, found in PHP’s core engine, impact platforms like WordPress and Drupal. Emergency patches were issued on October 21, with Cloudflare deploying protections ahead of public disclosure. OpenAI also pledged $1 billion in cybersecurity support for Proof of Work (PoW) and other infrastructure through its Frontline Defenders program.

OpenAI has helped uncover critical PHP vulnerabilities that could expose millions of websites to cyberattacks, prompting emergency security updates and an international response. Researchers from OpenAI, Wiz, and Calif used advanced artificial intelligence tools to identify flaws that could let attackers execute malicious code and access sensitive information. The vulnerabilities, collectively known as PHP2Shell, affect software that powers roughly 70% of websites worldwide.

PHP Developers Release Emergency Security Updates

The PHP Foundation released emergency patches on October 21, covering versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Consequently, administrators must update vulnerable installations immediately or consider taking affected systems offline.

Additionally, the flaws affect PHP’s core engine, potentially exposing websites running popular platforms such as WordPress and Drupal. Cloudflare deployed firewall protections before public disclosure and observed exploitation attempts.

Wiz researchers also compared the vulnerabilities’ potential significance to Heartbleed, a major security flaw discovered in 2014. However, unsupported PHP versions will not receive official fixes, leaving some systems particularly vulnerable.

AI Accelerates Cybersecurity Research

OpenAI’s Patch the Planet initiative coordinated researchers, software maintainers, and infrastructure providers to prepare fixes before disclosure. Besides identifying weaknesses, AI tools helped researchers demonstrate exploitability and coordinate defenses more quickly.

Moreover, OpenAI pledged $1 billion in subsidized access to Daybreak cybersecurity tools through its Frontline Defenders initiative. Significantly, the discoveries highlight AI’s growing dual role in cybersecurity, strengthening defenses while potentially helping attackers develop sophisticated exploits.

Related: Kalshi Taps Bitcoin-Backed Loans to Expand Leveraged Crypto Futures Trading

Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.