Millions of exploitation attempts reported after PHP flaws disclosed
A major tech company reported millions of attempts to exploit two critical PHP vulnerabilities found by AI, and Amazon said it saw attacks before the warning was made public. PHP's developers released fixes on Wednesday, and governments, banks and companies took websites offline while updating; a UK minister said 500 new vulnerabilities had been found in government systems.
Why it matters
PHP runs a large share of the world's websites, so unpatched servers can be taken over remotely without authentication.
Background
PHP is a programming language widely used to build websites. The flaws were described as the most significant ever found by AI tools.
The story so far
- Websites taken offline worldwide after critical PHP flaw
- Millions of exploitation attempts reported after PHP flaws disclosed
- Hacking attempts rise after AI-found PHP flaws
- Japan to simulate cyberattacks after PHP flaws
Sources
- Sky News ↗Oct 21, 10:00 PM ET
- BBC Technology ↗Oct 22, 4:23 AM ET
- CNBC ↗Oct 22, 12:20 PM ET
This summary was written automatically from the reporting linked above; follow the sources for the full story. How One Turn works.