Skip to content

Translation in progress Some entries still include text in the original language.

POLITICO· Sam Clark·Indexed by this site · Originally publishedSelectedAttention46

The AI threat comes true: inside the PHP vulnerability emergency

Inside the cyber flaw scramble that brought the AI threat to life

AI summary

Chainguard 提前披露由 OpenAI 协调、用 AI 工具发现的 PHP 漏洞,触发欧美英澳加网络机构紧急警告,多国政府网站预防性下线。PHP 据估计集成于约 70% 的网站。Chainguard CEO Dan Lorenc 道歉但称漏洞已遭利用才提前公开,PHP Foundation 指其单方面破坏了协同披露禁令。Cloudflare CEO Matthew Prince 称利用尝试从公告前 10 小时的数千次增至目前的数百万次,亚马逊云部门称漏洞已在野外被广泛利用。OpenAI 称这类漏洞只是其已发现并正在修复的多个重要漏洞的一部分,预计未来数月类似发现将急剧增加。

Why it was selected

The article reviews the global emergency response triggered by the early disclosure of an AI-discovered PHP vulnerability, showing the pressure that existing coordinated disclosure mechanisms face in the AI era.

Read originalpolitico.eu