NSA Warns of Critical PHP Vulnerabilities Discovered via AI Research
The U.S. National Security Agency (NSA) has issued an urgent warning regarding two critical security vulnerabilities discovered in PHP, a server-side programming language powering approximately 70% of the internet. The flaws, which allow attackers to infiltrate file systems or databases, were identified through AI-driven research initiatives by OpenAI and Google's Wiz. These vulnerabilities have existed in various forms since PHP version 5 was released in 2004. While no exploits have been reported in the wild, security experts warn that Large Language Models (LLMs) have lowered the barrier for hackers to weaponize these decades-old flaws. The PHP Foundation has issued patches, and users are urged to update to version 8.5.12 immediately. For websites unable to patch instantly, the NSA recommends taking them offline to prevent potential infiltration.
Tickers: $AMZN $GOOGL $MSFT $NET
Topics: AI-driven security testing NSA warning Open Source Security PHP vulnerabilities Web Infrastructure
Read the full article at TechCrunch
Part of the story Critical PHP2Shell Vulnerabilities Prompt Global Security Response from Tech Giants (5 articles)