Category
Good To Know
Vulnerabilities in the PHP server-side scripting language, which powers 70% of the Internet, has been fixed.
Security patches addressing those vulnerabilities were made available for Amazon Linux 2023 servers this morning, and Root802 immediately installed them for all our web-hosting clients.
The bugs, dubbed PHP2Shell, could allow attackers to read web server memory that could contain passwords or other sensitive information. The errant code has likely been within the language for 10 years, but was recently made apparent with the help of artificial intelligence (AI).
The issue was brought to light by OpenAI and cyber-security firms Wiz and Calif.
This is the latest example of changes AI is bringing to the world of the Internet. AI was responsible for helping identifying this issue, but also responsible for exposing how to exploit it.
Root802 provides regular maintenance, patches and upgrades to our Amazon Web Services Linux servers as part of the managed services package we provide our clients.
