The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers are actively exploiting two critical vulnerabilities in the PHP web software. The agency has ordered civilian federal agencies to fix the flaws in their systems within three days.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers are actively exploiting two critical vulnerabilities in the PHP web software. The agency has ordered civilian federal agencies to fix the flaws in their systems within three days.
This is reported by TechCrunch, citing a statement from CISA.
The problem affects the technology that powers about 70% of web servers in the world. The discovered holes, dubbed PHP2Shell, allow attackers to remotely access systems over the Internet without using passwords. Due to the high level of threat, some government agencies and companies have already temporarily shut down their resources for technical work.
The vulnerabilities remained undetected for many years. They had been fixed two years earlier, but the non-profit foundation that oversees PHP considered them impossible to exploit in practice. The situation changed when specialists from Calif discovered a way to bypass the protection and create a working exploit using artificial intelligence models.
Recall that PHP is used by almost 70% of websites, but the foundation that supports the development of the programming language has only one full-time employee and 14 part-time contractors.
OpenAI previously created a skill for Codex that helps you find out if a site is using a version of PHP with critical vulnerabilities. You can simply enter the site address or run the tool directly on the server to check.
