人工智能技术发现了PHP编程语言中存在的一个严重远程代码执行（RCE）漏洞，影响范围达到全球互联网的70%以上23。这些已在PHP软件中存在多年的漏洞引发了大规模网络安全危机，全球网站遭遇数百万次黑客利用尝试13。安全公司Wiz称这是有史以来最严重的漏洞检测案例2，而OpenAI表示这是近年来最具影响力的安全问题之一2。亚马逊威胁情报团队在公开披露前识别了MadPot中的PHP2Shell漏洞利用4。
PHP开发者已针对这些漏洞发布了补丁修复2。受漏洞影响，全球范围内出现了网站大规模关闭的现象3，其中包括32个英国政府服务陷入离线状态4。PHP平台为全球超过70%的网站提供支持2，其安全风险的发生引发了各国政府和企业的紧急修复响应。PHP指责供应链安全公司Chainguard的行为对网络安全构成了巨大风险1。
A severe remote code execution vulnerability in PHP has been discovered affecting over 70% of websites worldwide, sparking an urgent security response across governments and organizations.13 Artificial intelligence played a key role in identifying the flaw, which has existed within the PHP software for years.23 The vulnerability has already prompted millions of exploitation attempts by attackers globally, leading to widespread website shutdowns and forcing emergency patching efforts.3
The scale of the incident is significant, with 32 British government services being taken offline as a result of the vulnerability.4 Security firm Wiz has characterized this as one of the most severe vulnerabilities ever detected,2 while OpenAI described the discovery as among the most impactful security issues in recent years.2 Amazon's threat intelligence team identified the PHP2Shell exploit in MadPot before the vulnerability became publicly disclosed.4 PHP developers have since released patches to address the flaws.2
The incident has generated tension within the cybersecurity community, with PHP attributing blame to supply chain security company Chainguard over concerns that its actions have created substantial risks for internet security.1 The vulnerability underscores the critical importance of PHP in modern web infrastructure, as the language powers major platforms including Wikipedia and numerous e-commerce websites.2
评论
还没有评论，欢迎留下第一条。