International governments and agencies have advised organizations to either patch or disable websites affected by severe flaws in the PHP programming language. The vulnerabilities, identified by AI tools, were deemed the most significant ever found in the tech sector, prompting urgent action. Multiple entities, including Finland's government and the BBC, have taken their sites offline as a precaution. The US National Security Agency and the UK's National Cyber Security Centre have issued similar warnings, urging immediate action to secure systems.
The discovery of these flaws, which could grant attackers access to servers and databases, has led to widespread disruptions. The Wikimedia Foundation and Edinburgh council have also shut down parts of their online services. While the exact impact on the internet remains under assessment, estimates suggest that roughly 70% of the web could be affected. The PHP Foundation, which oversees the language, has released a patch, but the full extent of the issue is still being evaluated.
The vulnerabilities were found through a program involving OpenAI's advanced AI tools, highlighting the growing role of artificial intelligence in cybersecurity. Despite the urgency, some organizations are struggling to locate all instances of PHP in their systems, making the patching process complex. Cybersecurity experts warn that the widespread use of PHP makes it a prime target for attackers, emphasizing the need for continuous monitoring and updates. The situation underscores the critical importance of timely security measures in maintaining the integrity of the internet infrastructure.