Key facts
- AI systems discovered critical vulnerabilities in the PHP programming language.
- The flaws could allow hackers to take control of a website's server without credentials.
- PHP powers an estimated 70% of all websites globally.
- OpenAI, Calif, and Wiz collaborated to verify the vulnerabilities and develop patches.
AI systems have uncovered critical vulnerabilities in the PHP programming language, which could allow hackers to gain unauthorized access to servers. Cybersecurity firms Calif and Wiz, working with OpenAI, identified the flaws, estimated to affect about 70% of global websites. The National Security Agency warned that such vulnerabilities often provide direct access to a server's file system or database, recommending systems be taken offline if immediate updates are not possible. The White House is assessing the potential impact on US government systems and critical infrastructure, while the UK's National Cyber Security Centre urged organizations to take immediate action.