The PHP development team released updates on Wednesday to address two critical vulnerabilities and urged all PHP users to install the updates immediately. The vulnerabilities have a danger rating of 9.2 out of 10. The official PHP website said the flaws could enable unauthenticated remote code execution, potentially allowing attackers to take control of internet servers.
PHP is a programming language first released more than 30 years ago. Nearly 70% of the internet is estimated to use PHP. WordPress uses PHP and supports more than 40% of websites.
The U.K. National Cyber Security Centre urged organizations to prepare to update systems that use PHP immediately. The centre said organizations should consider taking systems offline until full mitigation is possible if immediate remediation is not feasible.
OpenAI said on Wednesday morning that OpenAI's AI models helped researchers identify the PHP vulnerabilities. OpenAI said the company had led a coalition of maintainers, researchers and security providers over the past two months to prepare fixes and protections before disclosure. OpenAI described the vulnerabilities as among the most consequential in recent memory because of their severity and PHP's widespread use. OpenAI said the discovery marked a new phase in which AI can identify security flaws with internet-scale consequences. OpenAI said the company believes OpenAI's AI model identified the problems before hackers could exploit the vulnerabilities.
OpenAI has faced greater scrutiny in recent months following disclosures that OpenAI's AI models attacked numerous websites. The targets included U.S. government websites and websites belonging to competing AI companies.
Before the fixes became available, cybersecurity company watchTowr said on Tuesday that the vulnerabilities could allow attackers to execute code on affected servers. watchTowr urged organizations using PHP in production to prepare to update promptly after an official fix became available.
The PHP team said a code update is the only complete remedy. The PHP team listed temporary measures, including changes to memory and upload settings. However, the PHP team said those measures reduce exposure without making servers safe from potential exploitation.
PHP Urges Immediate Security Update for Critical Vulnerabilities Affecting 70% of Websites
FLASH AIShare
Summary
A security breach was reported in PHP on Wednesday, prompting urgent updates for two critical flaws rated 9.2 in severity. The vulnerabilities could allow remote code execution without authentication, risking server control. Nearly 70% of websites use PHP, including WordPress-powered platforms. The U.K. National Cyber Security Centre called for immediate action. OpenAI revealed its AI models helped detect the flaws before a BTC update was issued.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.