The tech world is racing to implement fixes after critical security flaws were discovered in software used to power much of the Internet.
The software, known as PHP, is an open source programming language widely used to power websites and web applications. The discovery of these flaws prompted urgent warnings from governments around the world, while tech giants including Google, OpenAI and Amazon joined efforts to uncover vulnerabilities, detect potential attacks and protect affected systems.
The two vulnerabilities, collectively known as “PHP2Shell,” could allow hackers to remotely execute malicious code on affected servers, potentially exposing sensitive data, according to cybersecurity researchers. While not all websites using PHP are necessarily vulnerable, the widespread use of the software has raised concerns about the potential scale of attacks.
The US National Security Agency on Wednesday urged organizations using PHP to prepare security updates fixing the vulnerabilities, warning that the flaws could provide attackers with direct access to server file systems and databases. The agency recommended taking affected systems offline until the vulnerabilities are fully patched if immediate updates are not possible.
The Federal Bureau of Investigation also warned that malicious actors could exploit the vulnerabilities to execute code remotely, putting sensitive data and networks at risk.
Cybersecurity authorities in Singapore, the United Kingdom, Australia, Canada and the European Union have issued similar alerts, highlighting concerns about the potential impact on businesses, government agencies and other organizations that rely on PHP-based systems.
Amazon said its threat intelligence team detected attempts to exploit the vulnerabilities before they were publicly disclosed, using its MadPot threat detection system, which monitors suspicious activity on internet infrastructure. The results suggest that malicious actors were already attempting to exploit the vulnerabilities. However, Amazon said it was unclear how the attackers obtained information about the flaws before they were disclosed.
At the same time, Google and OpenAI have highlighted the growing role of artificial intelligence in identifying and responding to cybersecurity threats. Google said its Wiz cybersecurity unit uses AI models to help find and investigate vulnerabilities, while its Gemini AI helps in efforts to assess flaws, test potential attacks and verify security patches.
OpenAI said researchers working with its AI models also helped uncover critical PHP vulnerabilities. The company said it has spent the past two months leading a coalition of software maintainers, cybersecurity researchers and security vendors to coordinate patches and prepare protective measures before public release.
The creator of ChatGPT described the flaws as one of the most significant security issues in recent memory, highlighting both the potential for advanced AI systems to identify vulnerabilities in widely used software and the risk that similar capabilities could be exploited by cybercriminals.
Cloudflare, which provides cybersecurity and website infrastructure services, said it has deployed protections against PHP2Shell vulnerabilities through its web application firewall. The company said its measures were designed to help block malicious requests targeting affected systems, providing an additional layer of defense as organizations work to install software updates.
The PHP development team has released security patches, with authorities urging website operators to identify affected versions and apply updates as quickly as possible. The episode highlights how vulnerabilities in widely used software can pose risks across industries and borders, even as AI increasingly plays a role in helping security researchers discover and remediate these weaknesses.
Gn bussni
