AI uncovers massive flaw in web's foundational code
TL;DR
Security officials are warning about two critical vulnerabilities in PHP, the open-source language that runs a large share of all websites, Axios reports. Researchers found the bugs partly with help from an OpenAI model, making it one of the most consequential security discoveries yet made with AI. Government agencies from the US to Japan are urging companies to apply the patch or consider taking sites offline to avoid attacks. OpenAI highlighted the role its model played in discovering one of the two flaws.
Nauti's Take
An OpenAI model helping to find critical PHP flaws is clear progress for security research at scale. The risk: attackers can use the same tools, and the window between discovery and exploitation is shrinking.
Anyone running PHP sites, CMS installs or plugins should inventory versions now and check the official patch status.
Sources