AI turned a PHP vulnerability known for 22 years into a security crisis in two days
Researchers at security firm Calif, working with OpenAI's Patch the Planet initiative, applied a language model to PHP, the language behind 70% of the world's websites, and found ways to exploit a vulnerability flagged since 2004 by researcher Stefan Esser in just two days. Wiz, backed by Google, found additional exploits. The patch was published on Wednesday along with the findings. Experts warn that AI lowers the barrier for attackers and that "security by exhaustion" no longer protects.
In 40 seconds
- Calif and OpenAI's Patch the Planet initiative used AI to find in two days how to exploit a PHP vulnerability flagged in 2004 by Stefan Esser.
- Wiz, backed by Google, discovered additional exploits and called the problem one of the most severe in software history.
- The patch was published on Wednesday, the same day OpenAI disclosed the exploit's existence.
Read the full story at CNN en Español
IASummary generated by artificial intelligence from a story by CNN en Español. It may contain errors: the original source prevails.
Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.