Equity podcast debates PHP flaws, disclosure panic and attack attempts
Original title: Will AI expose the rickety infrastructure of the internet?
Cloudflare's CEO is cited as seeing PHP2Shell attack attempts climb into the millions after an embargo broke.
TechCrunch's Equity hosts discuss a PHP vulnerability disclosure that told site owners to patch immediately or take sites offline. Speakers say the bug is decades old and affects much of the web, including WordPress and Drupal. A host first credited large language models, but the transcript says human researchers in OpenAI and Wiz's Hack the Planet effort found the bugs and used AI to exploit them.
Unconfirmed: Speakers disagree on whether AI discovered the bugs, and successful compromises are not confirmed.
- Hosts say PHP underpins systems such as WordPress and Drupal.
- Korosec cites about 70% of websites and tens of millions of sites.
- The correction says human researchers, not models alone, found the bugs.
- An embargo break is described as starting a race to exploit PHP2Shell.
Impact: attempted remote attacks on websites running PHP
| Product | Affected |
|---|---|
| PHP | — |
- 1.Patch affected PHP sites immediately or take them offline if patching is not possible.
- Organizations
- OpenAIWizGoogleCloudflare
From the original article
6 min read at techcrunch.com
The moment you realize the internet is "held together by glue and dreams."
By Anthony Ha · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.