攻击者正在利用PHP2Shell漏洞进行广泛的网络攻击，试图在受害系统上部署Mirai恶意软件，影响范围达数百万1。这一漏洞虽然已被发现存在长达22年之久12，但在人工智能技术的帮助下，短短两天内就从一个潜在威胁升级为严重的安全危机12。该漏洞影响全球约70%的网站2，引发了网络安全专家对可能引发新一轮互联网中断风险的担忧。
PHP官方在发布紧急补丁后仅两天内又发现了另一个未修补的远程代码执行漏洞1。这次事件表明，长期存在于互联网基础设施中的安全隐患，一旦被AI技术识别，可能迅速演变为大规模网络安全事件。
Attackers are leveraging the PHP2Shell vulnerability in a widespread exploitation attempt aimed at deploying Mirai malware, with attacks affecting millions of internet-connected systems1. The vulnerability, which had been known for 22 years, rapidly escalated into a critical security crisis within two days after being exposed12, largely due to artificial intelligence assistance in identifying and weaponizing the flaw2.
The scope of the threat is substantial, as the affected vulnerabilities impact approximately 70 percent of websites globally2. Cybersecurity experts have raised alarms about the potential for these exposures to trigger fresh waves of internet disruptions2. The situation became more pressing when PHP developers discovered an additional unpatched remote code execution vulnerability just two days after releasing an emergency patch to address the initial threat1.
评论
还没有评论，欢迎留下第一条。