CONNECT WITH US
Social Media

Social Media

What is PHP and why did it spark a global cyber-security scramble?

BBC News – Social Media logo

Published on

Add as a preferred source on Google
What is PHP and why did it spark a global cyber-security scramble?

For more than a decade, serious flaws had gone undetected in technology underpinning much of the internet.

It took artificial intelligence (AI) to bring them to light and caused a global cyber-security alert.

The vulnerabilities lie within a programming language called PHP, which has been used internationally since the 2000s to build websites.

Governments and cyber-security agencies around the world scrambled to contain the fallout of this discovery on Wednesday, and have urged website operators to install a new emergency fix or consider taking their platforms offline.

Cyber-security firm Wiz - one of the companies whose researchers uncovered the vulnerabilities - described the flaws as the "most severe" ever detected by AI.

OpenAI, whose technology was used to find the flaws, called the discovery "one of the most impactful security issues in recent memory".

Most people may not have heard of PHP - short for PHP: Hypertext Preprocessor - but they most certainly interact with it daily.

PHP powers a vast number of platforms, including online shops, Wikipedia and WordPress – the content management system behind many websites like blogs.

When you visit a website like Wikipedia, PHP is the code that collects information you need and presents it in a way you can read on the web, Paul Spain, chief executive of Gorilla Cyber Security, told the BBC.

But due to a flaw that could allow attackers to take control of affected web servers without authentication and steal sensitive data, everything built on PHP was left exposed.

AI could make such attacks easier and faster, Spain said, estimating that the flaw could affect "millions and millions" of websites.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.