Key facts
- A critical vulnerability in the PHP programming language was discovered.
- PHP is a core ingredient for content management systems like WordPress and Drupal.
- Tens of millions of websites use PHP.
- AI tools were used to find the vulnerability.
- Human researchers found the PHP vulnerability during the Hack the Planet initiative.
- The vulnerability has existed for decades but was previously unknown.
A critical vulnerability in the open-source programming language PHP has exposed the fragility of the internet's infrastructure, with experts warning that AI could exacerbate such issues. The vulnerability, which had existed for decades, was discovered by human researchers using AI tools during the Hack the Planet initiative, involving companies like Google and OpenAI. The disclosure has led to a surge in attempted hacks, with millions of attacks reported by Cloudflare. Many websites, particularly those not run by well-resourced companies, may struggle to patch the vulnerability, raising concerns about data and privacy.