Two critical PHP flaws found with AI assistance reportedly prompt website shutdowns

Two critical vulnerabilities in PHP, a programming language used for websites and web applications, prompted temporary shutdowns of government websites and other online services, The Economic Times reports. Websites and services in the Netherlands, Finland, France and Denmark were among those affected by precautionary shutdowns or maintenance, according to the report.

The outlet says the FBI and National Security Agency warned that the flaws could let attackers execute code remotely, potentially compromising sensitive data and networks. The FBI's cyber division advised operators to take websites offline if they could not immediately install security updates, The Economic Times reports. The outlet says the PHP Foundation released fixes and instructions for updating systems.

On the discovery, The Economic Times attributes the role of AI to cybersecurity companies Calif and Wiz. It reports that OpenAI said it led a coalition of researchers and security providers working on the vulnerabilities over the preceding two months, while PHP's maintainers led the fixes and release. The report does not establish whether Wiz used OpenAI models.