Sourced fact
The News
The UK's National Cyber Security Centre (NCSC) discovered critical vulnerabilities in the PHP programming language, which is used by many websites worldwide. Security authorities in the European Union and Australia have warned that these vulnerabilities could be exploited by hackers. Amazon noted that attempts to exploit these vulnerabilities began before the NCSC's disclosure, suggesting that details of the vulnerabilities had leaked online. The security firm Wiz indicated that approximately 70% of the internet could be affected by these vulnerabilities, although the BBC has not confirmed this figure.
A spokesperson for the UK government stated that all organizations, whether public or private, should follow guidance to protect their systems. The NCSC added that organizations unable to fix the vulnerabilities immediately should shut down their services until permanent solutions are found.
These vulnerabilities have led to disruptions in important websites such as Wikipedia and BBC programs like "Doctor Who" and "The Traitors." Local authorities in Edinburgh and Oxford also temporarily shut down their websites. The Chair of Australia's AI Strategy Council, Antha-Maria Arabia, pointed out that using AI to discover vulnerabilities means that threats could emerge within hours or even minutes after technical details are disclosed.
The U.S. National Security Agency confirmed that these vulnerabilities could allow hackers to access file systems or databases, putting sensitive data at risk. OpenAI noted that this issue ranks among the most pressing cybersecurity concerns in recent months.
Analysis & context
Analysis & Context
From an analytical perspective, this event highlights the rapid evolution in cybersecurity thanks to AI. As noted by the Chair of Australia's Human Use of AI Strategy Council, the use of AI means that "more attackers can act within hours or even minutes after a vulnerability detail is disclosed."
In a broader context, these vulnerabilities affect nearly 70% of the internet, raising significant concerns about the security of electronic systems. This event underscores the need for improving cybersecurity measures and rapidly responding to new threats.
It is also noteworthy that these vulnerabilities had gone undetected for up to a decade, emphasizing the importance of continuous system updates and the immediate application of security patches.
