AI-Found PHP Flaws Prompt Global Patch Push; Reports Differ on Scale of Hacking Attempts
Photo: The New York TimesGovernments and cybersecurity agencies worldwide on Wednesday urged website operators to install an emergency fix for severe vulnerabilities in PHP, a programming language used in an estimated 69% of websites, or consider taking sites offline. Researchers found two flaws in August using AI, including OpenAI technology, and worked across borders to develop patches released Wednesday. Wiz, whose researchers helped uncover them, called the flaws the most severe ever detected by AI. The bugs could let attackers take over web servers without authentication and steal data. On Thursday, Sophos's Don Smith said his firm had seen only a couple of real exploitation attempts. Cloudflare CEO Matthew Prince said the company had seen millions of attempts after public disclosure.
Right-leaning outlets had not reported this story at the time of writing, while left-leaning and alternative/independent outlets had. Left-leaning coverage focuses on AI's cybersecurity implications (The New York Times) and on early signs hackers were struggling to exploit the flaws (NBC News). Alternative outlets include a BBC explainer on PHP and the global alert, and a Reuters report centered on surging hacking attempts, a sharper picture than NBC's.
How the sides differ Left sources emphasize few exploitation reports and AI's cybersecurity implications; alternative sources stress either the severity or millions of attempts; right sources have not covered it.
Headline, comparison and summary written by AI from the articles below. AI can make mistakes, so check the original articles before relying on a detail.