PHP security flaws alarm governments and websites; AI helped detect them
Vulnerabilities in the PHP programming language, present for more than ten years, raised cybersecurity alerts in several countries. The flaws could allow attackers to gain unauthorized access to web servers, execute code and steal confidential information. PHP developers released updates on October 21. The investigation involved specialists from Calif and Wiz, who used OpenAI artificial intelligence tools to analyze the code. Public entities in Finland, the Netherlands and the United Kingdom, and the Wikimedia Foundation, took preventive measures, including temporarily suspending pages and systems.
In 45 seconds
- The PHP flaws had been in the software for more than ten years and could allow code execution on servers without authentication.
- Calif and Wiz used OpenAI AI tools to detect the flaws and test their exploitation across different applications.
- Finland, the Netherlands, the United Kingdom and the Wikimedia Foundation temporarily suspended pages and systems as a preventive measure.
IASummary generated by artificial intelligence from a story by El Colombiano. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.