Bbc AI Uncovers Major Vulnerabilities in PHP Affecting 70% of Websites
Article Content
- •AI technology from OpenAI identified severe vulnerabilities in PHP.
- •The flaws affect over 70% of websites, including major platforms like Wikipedia.
- •Patches have been released, but the vulnerabilities had been present for years.
A significant flaw in PHP, the platform powering over 70% of websites, was discovered by AI technology from OpenAI. Cyber-security firm Wiz labeled the issue as the 'most severe' ever detected, prompting urgent patches from PHP developers. The vulnerabilities, which had remained unaddressed for years, could potentially be exploited by hackers. The situation has led to a global scramble among governments and cyber-security agencies to mitigate the risks. OpenAI described this discovery as one of the most impactful security issues in recent memory, emphasizing the nature of the vulnerabilities. The exact nature of the vulnerabilities and their potential exploitation methods have not been detailed in the reports.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What systems are affected by these vulnerabilities?
What actions are being taken to address these vulnerabilities?
How severe are these vulnerabilities?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…