Skip to playerSkip to main content
  • 15 minutes ago
AI helped researchers uncover critical security flaws in PHP that had gone undetected for years, causing government websites across Europe to go offline. Here's what PHP is all about.

Category

🗞
News
Transcript
00:00AI just helped uncover a critical security flaw hiding in plain sight for years.
00:05And the discovery was serious enough that several European government websites were
00:09taken offline.
00:10Here's what happened.
00:11The problem lies in PHP.
00:13Never heard of it?
00:14Well, you probably use it every day without knowing it.
00:16Created in the 1990s, PHP is a programming language used by nearly 70% of the websites
00:22worldwide.
00:22It runs on web servers, where it helps put together the content you see on the website
00:26in your browser.
00:27It handles things behind the scenes, like processing logins, managing shopping carts,
00:31or loading content from databases.
00:33Now, cybersecurity researchers used AI to uncover critical flaws in how PHP handles memory errors.
00:39When PHP runs out of memory, a bug can leave behind a corrupted internal state, instead
00:44of cleaning up properly.
00:45Hackers could trigger this error by sending specially crafted requests to a website.
00:49By exploiting the flaw, they could potentially access sensitive information, or even execute
00:54malicious code on the server.
00:56And they wouldn't even need a password.
00:57PHP developers have already released security patches.
01:01But experts say some outdated systems could remain vulnerable for months.
01:05Among all the experts said, we get as many questions.
01:05All the media.
01:05Let's go.
01:05Let's go.

Recommended