AI Finds Serious Security Flaw in Common Website Software

Researchers have used artificial intelligence to find serious security problems in PHP, a programming language used by around 70 percent of websites worldwide. Artificial intelligence, or AI, refers to computer systems that can perform tasks that usually need human thinking.

The discovery, called PHP2Shell, includes several critical vulnerabilities. A vulnerability is a weakness in software that attackers can use to break in or cause harm.

These flaws allow a type of attack known as remote code execution, or RCE. This means a hacker can run commands on a website's server from anywhere, without needing direct access to it.

Because PHP is used so widely, these vulnerabilities could affect a huge number of websites across the internet, not just one company or platform.

Since the discovery became public, there has been a sharp increase in hacking attempts. Hackers appear to be trying to exploit the newly revealed flaws before website owners can fix them.

As a result, some websites around the world have shut down temporarily. Site owners are taking this step as a safety measure while they work on patches, which are updates that fix software problems.

This case highlights how AI can now be used to find security flaws faster than before, which brings both benefits and risks. While it helps researchers spot dangers early, it may also give attackers new tools to find weaknesses. The story also shows how a single piece of widely used software can affect a very large part of the global internet when a serious flaw is found.