AI NewsWaveTwo Critical PHP Vulnerabilities Found by AI, Prompting Urgent Responses Worldwide
Key points
- Two critical vulnerabilities found in PHP
- Some European government sites temporarily suspended
- Korea raises cyber crisis alert from Attention to Caution
Two critical security vulnerabilities were found in PHP, a programming language widely used on websites worldwide, and countries have moved into urgent response. IT Chosun reported that the PHP team on the 21st (local time) mentioned two vulnerabilities known as PHP2Shell. They allow a server to be taken over without authentication, and actual attack attempts have been detected. Chosun Biz and iNews24 wrote that they were found using AI.
Given the high risk of damage, measures followed. Chosun Biz reported that major European countries temporarily suspended government websites as a precaution, and AI Times wrote that European governments, hospitals and schools suspended websites one after another. According to iNews24, the Korean government raised its cyber crisis alert from Attention to Caution on the 22nd.
Corporate responses were also reported. Newsis reported that Google and OpenAI analyzed the vulnerabilities with AI and verified security patches, and that Amazon detected attack attempts. Boannews reported that Palo Alto Networks said about 22 million PHP instances worldwide appear to be exposed. AI Times reported that an emergency fix has been released.