PHP Armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet

This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.

PHP Armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet

TL;DR

  • Two critical vulnerabilities found in PHP, a language used by roughly 70% of websites.
  • The NSA has issued an urgent warning, recommending sites be taken offline if immediate patching is not possible.
  • These flaws have existed in PHP versions since 2004 and were discovered using AI tools from OpenAI and Google's Wiz.
  • AI has made these previously difficult-to-exploit vulnerabilities a high risk for cyberattacks.
  • A collective effort involving multiple tech companies and the PHP Foundation led to the development of patches.
  • There are no reported exploits in the wild, as researchers found the flaws before hackers.
  • The recommendation is to update PHP to the current supported version.