PHP security flaw threatens much of the internet as millions of exploitation attempts are logged
Researchers discovered a vulnerability in PHP, the open-source language used by an estimated 70% of websites and web applications. The flaw, hidden for years, was identified by security firm Calif using OpenAI's GPT-5.6 Sol model and independently reported by Wiz. Cloudflare reported millions of exploitation attempts after the disclosure, and several government sites in Europe and Asia went offline as a precaution. As of Thursday afternoon, no successful attack had been confirmed.
In 40 seconds
- The flaw is in PHP, a language used by about 70% of websites and web applications, including content managers such as WordPress and Drupal.
- It was found by Calif using OpenAI's GPT-5.6 Sol model and independently reported by Wiz, a firm owned by Google.
- Cloudflare said exploitation attempts went from thousands to millions within hours of the public announcement.
Read the full story at El Espectador
IASummary generated by artificial intelligence from a story by El Espectador. It may contain errors: the original source prevails.
Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.