Ars Technica · AI· Tom Wilson and Rafe Rosner-Uddin, Financial Times·· 9d agoSelected
OpenAI and security groups uncover PHP2Shell flaw that could let attackers hijack servers
Original source: Ars Technica · AIRead original
AI brief
OpenAI, in partnership with U.S. cybersecurity groups Calif and Wiz, discovered the PHP2Shell vulnerability that provides a direct path to a server’s file system or database. The flaw affects PHP, which powers roughly 70% of websites worldwide, and could allow attackers to take control of a site without credentials. The White House is assessing the impact on federal systems, while the UK’s National Cyber Security Centre urges immediate action.
Why it matters
The vulnerability’s broad reach and potential to compromise critical infrastructure make it a high‑stakes issue for anyone monitoring AI‑driven security research and its dual use in cyberattacks.
Source: Ars Technica · AI · arstechnica.com