What is PHP and why did it spark a global cyber-security scramble?
BBC News explores the recent global cyber-security alert triggered by serious vulnerabilities within the programming language PHP.
By Osmond Chia, Business Reporter
For over a decade, hidden flaws in the technology foundational to much of the internet went undetected. It took artificial intelligence (AI) to uncover these vulnerabilities, causing a global stir on Wednesday.
The Vulnerabilities
These vulnerabilities lie within PHP, a language widely used since the 2000s to build websites. Governments and cyber-security agencies worldwide swiftly responded, advising website operators to install emergency patches or consider taking their platforms offline.
Cyber-security firms like Wiz characterized these flaws as the "most severe" ever identified by AI. OpenAI, whose technology discovered the flaws, labeled it "one of the most impactful security issues in recent memory."
Understanding PHP
PHP, short for PHP: Hypertext Preprocessor, powers numerous platforms many people interact with daily, including online shops, Wikipedia, and WordPress. When you access Wikipedia, PHP gathers the required information and presents it in a web-readable format, as explained by Paul Spain, CEO of Gorilla Cyber Security.
The vulnerabilities allow attackers to gain unauthorized control over affected web servers and steal sensitive data. AI can expedite and amplify such attacks, with an estimated impact on "millions and millions" of websites, according to Spain.
A Global Impact
The alert led to disruptions worldwide, affecting gaming platforms, government portals, and online forums. Wikipedia, along with several government websites and online services, temporarily took down their systems as a precautionary measure.
Scotland's public organizations, including councils and health boards, also followed suit, taking their websites offline. Experts caution that poorly maintained websites, especially those of smaller organizations, may be more vulnerable to exploitation in the coming weeks as technical details become publicly available.
Response and Resolution
In response to the exposure, PHP developers released patches to fix the vulnerabilities on Wednesday. They strongly encourage all PHP users to update immediately.