Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
Hackers were already probing the bug before defenders were told it existed.
The short version
- Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems.
- The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public.
- The vast impact of the bugs, uncovered with the help of OpenAI and Google models after being undetected for more than a decade, highlights the ability of AI to upend cybersecurity.
What happened
The release of new models earlier this year from Anthropic and OpenAI with powerful cyber capabilities prompted warnings from politicians and financial regulators and led the US government to temporarily limit their rollout. The NSA on Wednesday warned all organizations using the programming language known as PHP to immediately update their systems or take them offline.
Why it matters
Ars Technica says hackers got a four-day head start on epic php2shell vulnerability is the central development readers should understand.
Summary by Nerd News Network. Read the full article at Ars Technica via the links above and below.