Security researchers using AI models—including OpenAI’s GPT 5.6 Soul and Google’s Gemini [10:27]—recently uncovered two critical security flaws rated 9.2 out of 10 inside PHP, the backend software engine powering an estimated 70% of all websites [00:00], [01:42], [02:49]. Although an OpenAI-led coalition worked for two months to quietly prepare a patch, details of the vulnerabilities leaked early [03:49], [04:15], triggering urgent global alerts from the FBI, NSA, and foreign leaders, and prompting several governments to temporarily take services offline [00:13], [00:26]. While major providers like Cloudflare quickly deployed emergency protections [05:56], nearly half of top PHP websites run outdated "end-of-life" versions or belong to forgotten small businesses that will never apply the patch, raising the risk of widespread data leaks in the coming months [08:11], [08:23], [09:48]. Ultimately, because these long-hidden bugs were found by an older-generation AI model and OpenAI warns that several more significant vulnerabilities are already in the pipeline [11:43], [13:42], the incident serves as an early warning shot about the fragility of legacy internet infrastructure, the need for good password hygiene, and the urgent debate over restricting advanced or open-source AI before autonomous agents are weaponized by bad actors at scale [17:04], [19:44], [24:01], [26:52]. [Summary provided by Gemini 4 Argon]
No comments:
Post a Comment