AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk
- PHP developers released fixes for two critical vulnerabilities rated 9.2 out of 10 and urged users to update immediately.
- PHP runs on nearly 70% of websites with identifiable programming languages, including sites using WordPress.
- European governments and other organizations took websites or services offline while applying patches or assessing the risk.
- Calif and Wiz said AI models helped researchers find the flaws, which could let attackers run commands on vulnerable servers without passwords.
1241 Articles
1241 Articles
Attackers could exploit these vulnerabilities to access systems without a password, steal data, modify website content,
AI is exposing how fragile the web really is. What you can do to stay safe
The vulnerabilities were around for years — more than a decade — but researchers were only able to understand how hackers could take advantage of them with the help of AI. The vulnerability, called P2PShell, impacts a coding language that powers 70 percent of the world’s websites, enabling hackers to remotely execute code or gain …
A flaw in the software that runs the sites allows a hacker or worse to a cyber collective linked to state actors like Russia to enter without password. The Agency for National Cybersecurity: eight out of ten sites have not yet installed the update
PHP2Shell: AI-Found PHP Flaws Put Millions of Sites at Risk
PHP2Shell is a pair of critical PHP runtime flaws that AI-assisted researchers turned into working exploits after the bug sat unresolved since 2024. Patches cover PHP 8.2 and newer, while about 48% of PHP sites with a known version run older branches.
Coverage Details
Bias Distribution
- 44% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
