OpenAI和Google Wiz安全团队利用AI技术发现了PHP编程语言中存在20年之久的两个严重漏洞5。这些远程代码执行漏洞影响全球约70%的网站，超过3300万个网站面临风险15。漏洞披露后，4chan、DeviantArt、Wikipedia、Pokémon Home等多个知名网站以及荷兰、芬兰、加拿大等国的政府网站随之宕机或主动关闭23。
美国国家安全局周三发布紧急警告，建议无法立即修补的组织将网站离线，直到完成PHP 8.5.12版本的更新5。英国国家网络安全中心也发布了类似警告3。国际社会随即启动了名为"Patch the Planet"的全球协调补丁修复计划1。目前尚未有这些漏洞被主动利用的报告5。Wiz安全团队表示，AI技术使得针对不同PHP版本、配置和内存布局的漏洞利用成为可能5。
OpenAI and Google's Wiz security team have discovered two critical remote code execution vulnerabilities in the PHP programming language that have existed since 2004.5 The flaws affect approximately 70% of internet infrastructure, impacting over 33 million websites globally.5 The vulnerabilities were identified using artificial intelligence technology as part of a coordinated "Patch the Planet" initiative.15
The discovery has triggered widespread disruptions across the internet.1 Major websites including 4chan, DeviantArt, Wikipedia, and Pokémon Home have gone offline or been voluntarily shut down.3 Government websites in Canada, the Netherlands, and Finland have also been affected.23 The U.S. National Security Agency issued a warning advising organizations unable to immediately patch their systems to take them offline until they can update to PHP version 8.5.12 or later.5 The UK National Cyber Security Centre issued similar guidance.3
According to Wiz, artificial intelligence has made it possible to exploit these vulnerabilities across different PHP versions, configurations, and memory layouts.5 OpenAI discovered one of the flaws using GPT-5.6 Sol, while Wiz identified multiple vulnerabilities using Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol.5 No reports of active exploitation of these vulnerabilities have emerged thus far.5
评论
还没有评论，欢迎留下第一条。