AI just found a bug that puts up to 70% of the world's websites at risk, per The Wall Street JournalThe flaws, dubbed PH…

AI just found a bug that puts up to 70% of the world's websites at risk, per The Wall Street Journal

The flaws, dubbed PHP2Shell, sit inside PHP itself, the language that runs WordPress, Drupal, Joomla and Wikipedia

Every PHP version going back to 5.4 is affected, and the vulnerable code sat unnoticed for more than a decade

Attackers can take over servers remotely without logging in, or pull passwords, tokens and API keys straight out of memory

Researchers at Wiz and Calif cracked it with frontier AI models through OpenAI's Patch the Planet program, and Wiz ranks it among the most severe flaws in software history

PHP rushed out a patch Wednesday after details leaked online, and Cloudflare $CloudFlare(NET.US) is already seeing early attacks

Finland temporarily shut down its government's public websites and the Dutch cyber agency took its own site offline, per the BBC

This is the other side of the AI trade. The same models that turned a decade-old bug into a working exploit in hours are getting better every month, so every company running a website just got a surprise patching bill, and cybersecurity budgets look a lot less optional

Source: StockMarket.News