AI-detected PHP Security Flaw

What happened

The outlets' own sentences, most widely reported first. Hover or tap one to see who reported it.

Analysis

How it changed

1. 21 Oct

   Cybersecurity agencies in Europe, Australia, Japan and Britain have urged PHP users to update immediately or take websites offline until patches can be applied.

   7 outlets · The Straits Times
2. 22 Oct

   The incident "highlights how AI can uncover security flaws" but also how it can "help attackers rapidly develop offensive tools and exploits," OpenAI said in a blog post.

   3 outlets · BBC

Coverage 27 articles

• 30 Oct Why AI could threaten much of the world’s digital infrastructureCybersecurity experts discovered critical security flaws in the widely used PHP programming language using artificial intelligence (AI), which could allow hackers to breach systems. These vulnerabilities, named PHP2Shell, have existed undetected for over a decade due to their complexity and the reliance on AI to uncover them. The potential widespread impact of such flaws highlights concerns that much of the world’s…Al Jazeera
• 26 Oct Tyler Cowen: How to Outrun the AI HackersAI commentator Zvi Mowshowitz described the recent disclosure of a critical flaw in PHP as likely the worst day for cybersecurity yet. On that same day, AI identified and publicized this vulnerability before it could be patched, causing widespread disruptions to websites and prompting governments to temporarily shut down their sites to mitigate hacking risks. Cryptography experts are increasingly concerned about…The Free Press
• 23 Oct PHP bug "about as bad as it can get," cybersecurity reporter saysRaphael Satter, a Reuters cybersecurity reporter, discusses a significant bug in the PHP programming language that may affect up to 70% of the world’s websites, potentially exposing them to serious security risks. The article highlights the severity of the issue by quoting experts who consider it one of the worst possible vulnerabilities for this technology.CBS News
• 23 Oct 'It's been relentless': IT workers scramble to fix PHP flaw described as worst crisis in yearsIT workers worldwide have been grappling with a critical security flaw in PHP, a widely used programming language that powers millions of websites. Microsoft CEO Satya Nadella described the situation as the worst cyber crisis he has seen "in a long, long time." System administrators are overwhelmed by client demands to take sites offline and pressure to deploy urgent fixes while facing uncertainties about potential…BBC
• 22 Oct Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for youCybersecurity researchers using AI discovered critical vulnerabilities in the PHP programming language, affecting an estimated 70% of websites globally. This includes major platforms like Wikipedia and government sites. The flaw allows hackers to execute code remotely, potentially taking full control of affected servers. While updates are available to patch the issue, experts advise that website operators and…Daily Mail
• 22 Oct Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisisFollowing global warnings about newly disclosed software vulnerabilities in PHP used by approximately 69% of websites, cybersecurity experts report minimal exploitation attempts so far. Major security firms like Sophos and Palo Alto Networks have not detected any successful attacks as of Thursday evening, despite widespread scanning for exploitable targets. This apparent difficulty in exploiting the flaws is…NBC News
• 22 Oct What to know about the AI-detected security bug impacting wide swaths of the internetOn Wednesday, security experts warned of critical vulnerabilities in PHP, the programming language that powers about 70% of websites globally. The PHP Foundation and the FBI’s cyber division issued urgent advisories to update or shut down sites immediately due to potential unauthenticated access risks for hackers. This highlights the growing role of AI in detecting such security flaws. Some government services and…Toronto Star
• 22 Oct Thirty-two Government services offline amid PHP cybersecurity issueThe UK government reported that thirty-two services are offline due to a critical cybersecurity issue in PHP, a programming language used by many websites. Tech minister Baroness Lloyd of Effra confirmed during a House of Lords session that four additional services are partially unavailable as precautionary measures are taken to protect systems while security updates and fixes are applied. The National Cyber…Evening Standard
• 22 Oct What’s the PHP coding flaw that could pull down 70 percent of the internet?Critical vulnerabilities in PHP, a widely used programming language for web development, have caused many government websites to go offline as developers rush to apply urgent fixes. The bugs, named PHP2Shell and discovered independently by cybersecurity companies using AI, were hiding in PHP code for over a decade. Both flaws score 9.2 out of 10 on the industry’s severity scale, meaning they are critical. Developers…Al Jazeera
• 22 Oct How did AI discover the internet's massive cyber-security risk?Cyber-security firm Wiz, using technology from OpenAI, discovered significant vulnerabilities in the PHP platform, which powers over 70% of websites including Wikipedia and many e-commerce sites. Governments and cyber-security agencies are urgently working to address these flaws, described by experts as among the most severe ever detected. The article explores how AI was instrumental in uncovering this risk and its…BBC

Keep exploring

Similar coverageAustralia Orders Cyber Stocktake After Hack Similar coverageAI Safety And Security Concerns Similar coverageUK Cyber Defenses At Risk Similar coverageMedicare AI Breach Similar coverageAI Hacking Government Websites Similar coverageCyber Security Warning Similar coverageOpenAI AI Agent Leaks and Hacks Similar coverageAI Warning Shots China Security Risk Similar coverageOpenAI Australian Inquiry RecentLIV Golf Loses Backing