The NSA has issued a warning regarding two significant vulnerabilities in PHP, a programming language that powers around 70% of websites globally. Patches have been released by the PHP Foundation, but the NSA advises that unpatched sites should be taken offline to prevent potential attacks.
AI tools from OpenAI and Wiz were instrumental in identifying these flaws, which have existed since PHP version 5. The urgency for website operators to update to the latest PHP version is heightened as hackers may exploit these vulnerabilities now that they are publicly known.