Hackers got a four-day head start on epic PHP2Shell vulnerability
Summary
Amazon and other security groups have found serious security problems in PHP, a programming language used by most websites worldwide. These problems, discovered with the help of AI tools, are being quickly used by hackers, so experts are urging everyone to update their systems right away or shut them down until fixes are in place.Key Facts
- Hackers tried to exploit the PHP vulnerability four days before it was made public.
- PHP is used by about 70% of all websites, including sites built on WordPress.
- The problem was discovered by US cybersecurity groups Calif and Wiz, with help from AI models from OpenAI and Google.
- The US National Security Agency (NSA) and UK cyber authorities warned that websites are at high risk because of this flaw.
- The PHP developers released software updates to fix the vulnerability, and organizations are urged to update immediately.
- If updating is not possible quickly, sites should be taken offline to prevent hacking.
- The vulnerability can let hackers control a website’s server without needing a password.
- The White House is reviewing how this issue might affect government and critical systems.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
