Key facts
- Flaws in PHP programming language pose a potential global cyber threat.
- AI tools assisted researchers in finding the vulnerabilities.
- Website owners are warned to fix the weaknesses immediately.
- The patch for the flaws only works on the latest version of PHP.
Flaws discovered in the widely-used PHP programming language have been likened to an unexploded bomb due to their potential for widespread cyber-attacks. While the vulnerabilities have existed for years and are difficult for humans to exploit, AI tools are seen as a significant threat in leveraging them. The PHP foundation has issued a fix, but the news leak has created a dilemma, alerting both defenders and potential attackers. Millions of attempts to exploit the flaws have already been detected by companies like Cloudflare and Palo Alto Networks. Experts acknowledge the success of AI in helping to find and fix the bugs, but also warn that malicious actors can use similar AI capabilities to launch attacks. Website owners are urged to update to the latest version of PHP to apply the fix, a process that may require significant repairs for older sites.