Khasaaraha PHP: Khubarada ayaa ka digaya in AI ay si fudud u heli karto dayacanka internetka
Sean O'Kane ayaa ku tilmaamay dhacdadan inay tahay goob xisaabtan dhab ah oo muujinaysa sida internetku ugu tiirsan yahay teknoolojiyad duug ah.
Bandhigga Equity ee TechCrunch, Kirsten Korosec, Sean O'Kane iyo Anthony Ha ayaa ka wada hadlay dayacanka laga helay luqadda barnaamijka PHP ee furan, kaas oo website-yada qasbay in si degdeg ah loo hagaajiyo ama la xiro haddii aan hagaajintu suurtagal ahayn.
Dayacanka PHP iyo baaxadda website-yada
Kirsten Korosec ayaa sheegtay in dad badan aanay xitaa ogaan in website-yadooda ay ku jirto PHP, oo ah luqad barnaamij oo furan oo tobanaan sano jir ah. Waxay ku tilmaantay Hypertext Preprocessor inuu yahay qaybta muhiimka ah ee nidaamyada maareynta macluumaadka ee WordPress iyo Drupal, oo ku saabsan 70% website-yada, taas oo ka dhigan tobanaan milyan oo website.
Digniin ku saabsan AI iyo dayacanka mustaqbalka
Sean O'Kane ayaa sheegay in helitaanka ballaaran ee moodooyinka luqadda waaweyn iyo wakiilada AI ay ka dhigi doonaan mid si fudud loo helo dayacyadan. Wuxuu ku tilmaamay dhacdadan inay tahay goob xisaabtan dhab ah oo lagu ogaanayo khatarta ka dhalan karta dhisidda internetka intiisa badan ee ku salaysan teknoolojiyad furan sida PHP. Anthony Ha ayaa sheegay in dayacanku uu PHP ku jiray tobanaan sano, laakiin aan cidna ogeyn.
Dhibaatooyinka soo ifbaxaya iyo walaaca
Kirsten Korosec ayaa sheegtay inay tani tahay bilowga, iyada oo waydiisay waxa kale ee software duug ah oo xun oo dibadda ku jira oo la adeegsan doono. Waxay sidoo kale xustay in 404 Media ay soo bandhigtay link rot, maadaama dad, shirkado iyo dowlado ay xiraan website-yadooda. Sean O'Kane ayaa sheegay in Matthew Prince, maamulaha Cloudflare, uu qoray in la arkay malaayiin isku day oo hack ah oo PHP2Shell ah.
TechCrunch's Equity podcast panel discusses a decades-old PHP flaw, rushed disclosures and what AI could mean for future vulnerability hunting.
Website owners were told earlier this week to patch their sites immediately over recently discovered vulnerabilities in the open source programming language PHP, or take the sites down if they could not update right away, TechCrunch reported. On the Equity podcast, Kirsten Korosec, Sean O'Kane and Anthony Ha discussed the significance of the incident.
A Decades-Old Flaw at the Heart of the Web
Anthony Ha said the vulnerability is not new and has existed in PHP for decades, a language used to build much of the web, but no one knew about it. Kirsten Korosec said many people do not realize their sites run PHP, describing Hypertext Preprocessor as the core ingredient behind content management systems used throughout WordPress and Drupal, covering something like 70% of websites, or tens of millions of sites.
Disclosure, Exploitation and a Race Among Hackers
Sean O'Kane said a bunch of labs and companies like Google and OpenAI had people go out and find vulnerabilities, including the PHP one, while others rushed to exploit them. He said Cloudflare CEO Matthew Prince already posted about seeing it escalate to millions of attempted hacks of the PHP2Shell, and that a couple of people got ahead of the embargo, setting off a race among the hacker set.
AI and the Limits of Patching at Scale
Sean O'Kane said that with widespread access to large language models and AI agents, finding such vulnerabilities will only become easier, calling this "a real reckoning moment." Anthony Ha noted the specific vulnerabilities were found by human researchers, not AI models. Kirsten Korosec warned of the "next level of prepper doom," citing possible bank exploitation and data and privacy concerns.
Ilaha iyo xuquuqda sawirka
Sawir: TechCrunch Xigasho
