technology
Two Critical PHP Flaws, Found With AI, Prompt Emergency Patching and Website Outages
Developers of PHP, a programming language behind much of the web, issued updates to fix two critical vulnerabilities. Reuters reports the developers said one flaw was found in 2024. Several outlets say AI tools uncovered the flaws. The NSA and FBI urged organizations to update immediately or take systems offline. Websites were taken offline, including government sites per Reuters, and The Verge reports problems at 4chan, DeviantArt and Wikipedia. Reuters reports millions of hacking attempts, and a WIRED headline says hackers exploited the flaws days before patches were released. Coverage says up to 70% of websites could be at risk, a figure that appears in headlines and summaries. CBS says researchers at OpenAI found a bug, citing the Wall Street Journal's reporting.
2024Reuters reports PHP developers said one flaw was found in 2024.
Oct 21PHP updates issued, NSA and FBI warnings published, and websites taken offline.
Oct 22Reuters reports millions of hacking attempts; the race to patch continues.
Why It Matters
Any organization running PHP, including sites built on WordPress, may be exposed until it updates, and some sites are down now. Government agencies have told operators to patch right away or disconnect. Visitors may see outages today, and Reuters reports millions of hacking attempts.
What's Next
Confidencemoderate
Agreementbroad