PHP严重漏洞波及大量网站，AI参与漏洞发现
The Verge AI 报道称，PHP 编程语言中的两个漏洞使互联网的大量部分面临风险，并援引一些说法称多达 70% 的网站不同程度地使用 PHP。报道称，漏洞披露后 DeviantArt 和 4Chan 曾暂时关停，Internet Archive 一度被迫离线，还有两款老式日本手机游戏因该漏洞利用而停服。报道称该漏洞存在于回溯约 20 年的每一个 PHP 版本中，其中许多已不再受支持；安全公司 Wiz 称这些漏洞是软件史上最严重的漏洞之一，报道还提到 GPT-5.6 Sol 被用于发现一个关键 PHP 漏洞。
Wiz 称这些漏洞是软件史上最严重的漏洞之一，报道还将该事件与借助 GPT-5.6 Sol 的 AI 辅助漏洞发现联系起来。
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger.
By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.
But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.
Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”
- The Internet Archive was briefly forced offline because of PHP.
- Two old-school Japanese mobile games are shutting down over the PHP exploit.
- The PHP2Shell exploit hit Cloudflare hard.
- PHP: The three letters that shut down sites all over the internet today
- GPT‑5.6 Sol was used to identify critical PHP flaw.
- A critical PHP vulnerability may take websites down today
#PHP#Wiz#GPT-5.6 Sol#WordPress#Drupal#Wikipedia#Cloudflare#Internet Archive#DeviantArt#4Chan