AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
Developers said the flaws could let attackers seize control of websites, and government agencies urged operators to patch or take systems offline.
- The PHP Foundation released patches, and government agencies urged organizations to update immediately or take vulnerable systems offline.
- Cloudflare CTO Dane Knecht reported that early attacks were emerging, while Cloudflare updated firewall protections.
1238 Articles
1238 Articles
Attackers could exploit these vulnerabilities to access systems without a password, steal data, modify website content,
AI is exposing how fragile the web really is. What you can do to stay safe
The vulnerabilities were around for years — more than a decade — but researchers were only able to understand how hackers could take advantage of them with the help of AI. The vulnerability, called P2PShell, impacts a coding language that powers 70 percent of the world’s websites, enabling hackers to remotely execute code or gain …
A flaw in the software that runs the sites allows a hacker or worse to a cyber collective linked to state actors like Russia to enter without password. The Agency for National Cybersecurity: eight out of ten sites have not yet installed the update
PHP2Shell: AI-Found PHP Flaws Put Millions of Sites at Risk
PHP2Shell is a pair of critical PHP runtime flaws that AI-assisted researchers turned into working exploits after the bug sat unresolved since 2024. Patches cover PHP 8.2 and newer, while about 48% of PHP sites with a known version run older branches.
Coverage Details
Bias Distribution
- 44% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
