网络安全研究人员在PHP编程语言中发现了一个关键漏洞，该漏洞影响全球70%以上的网站1。Wiz公司的研究团队在8月利用Google Gemini和OpenAI ChatGPT等AI模型识别出这一缺陷后，随即向PHP开发团队报告1。PHP开发者在9月底确认问题并启动修复工程，最终于10月21日发布了紧急补丁1。
这一漏洞可被黑客利用实施远程接管网站的攻击，并影响Drupal和WordPress等广泛应用的平台1。鉴于PHP自1997年以来在服务器端的广泛部署，该漏洞的潜在威胁范围极大1。澳大利亚信号理事局、美国网络防御局以及英国、欧洲和日本等多国政府机构随即发出警告1。包括鹿特丹港在内的多个欧洲政府部门和运营商已采取防范措施，建议网站管理员立即更新系统或临时下线相关网站1。
A major security flaw has been identified in PHP, the programming language that powers over 70% of all websites globally, prompting urgent warnings from government cybersecurity agencies across multiple countries 1. Researchers at Wiz, a cybersecurity firm, discovered the vulnerability in August using artificial intelligence models, specifically Google Gemini and OpenAI's ChatGPT, before reporting their findings to the PHP development team 1. The flaw could potentially allow attackers to remotely compromise websites built on widely-used platforms including Drupal and WordPress 1.
PHP developers confirmed the issue by late September and began working on a fix 1. The PHP team released an emergency patch on October 21, just as the vulnerability was about to be publicly disclosed on Hacker News 1. In response to the threat, cybersecurity authorities including Australia's Signals Directorate, the U.S. Cyber Defense Agency, and government bodies in the United Kingdom, Europe, and Japan have issued formal warnings urging website administrators to immediately update their systems 1. Several European operators, including Rotterdam Port, have already taken websites offline as a precautionary measure 1.
评论
还没有评论，欢迎留下第一条。