The UK government is working to identify and patch potential exposure in its online services following the discovery of critical vulnerabilities in the PHP programming language. Governments and major companies, including Amazon, rushed to secure systems on Thursday before hackers could exploit the flaws, which were reportedly discovered by AI.
The widespread vulnerabilities in the PHP programming language, reportedly discovered by AI, pose a significant risk to global online services, including those of governments and major corporations like Amazon. The rapid exploitation of these flaws highlights the evolving cybersecurity landscape and the potential for widespread disruption.
The UK government is actively working to identify and patch potential exposure in its online services after critical vulnerabilities were discovered in the PHP programming language. Governments and major companies, including Amazon, rushed to secure their systems on Thursday before hackers could exploit the flaws. The vulnerabilities were reportedly first discovered by AI, leading governments and agencies to urge websites to address them. Amazon stated it experienced multiple exploitation attempts before a warning embargo was lifted, with its security chief CJ Moses noting the use of anonymous IP addresses suggested a "threat actor." The PHP Foundation intended to release a fix later this month, but details of the flaw were leaked on social media on Tuesday. Subsequent attacks on Amazon on October 21 suggested multiple actors were involved. Anna-Maria Arabia, CEO of the Australian Council on AI Strategy, noted that AI is rapidly changing the cybersecurity landscape, enabling more actors to act within hours or minutes of a vulnerability disclosure. Cybersecurity firm Wiz estimated that roughly 70% of the internet is affected, though this figure could not be independently verified. As a precaution, the Dutch cybersecurity agency went offline, Finland's government shut down its public web services, and Wikipedia took down parts of its website, in line with advice from governments including the US. The US National Security Agency stated the vulnerabilities could allow attackers to steal sensitive data, disrupt services, or move deeper into a network.
Pick the topics you care about. Get only what matters, on your cadence.