Govt sites go dark after AI-discovered flaw sparks security scramble, Pg16

Key Highlights:

• Government websites across Europe and other regions went offline due to critical vulnerabilities discovered in the widely used programming language PHP.
• The flaws, which had existed for over a decade, were uncovered using Artificial Intelligence (AI) tools.
• Cybersecurity agencies globally urged immediate updates or temporary website shutdowns to prevent exploitation.
• Tech firms warned that some hackers were already exploiting these vulnerabilities, prompting a "race to exploit" scenario.
• The discovery was made by cybersecurity company Wiz using its Wiz Atlas AI tool, along with Google Gemini and OpenAI's GPT-5.6.

Detailed Insights:

• The vulnerabilities in PHP, a programming language dating back to the early 1990s, posed a significant threat due to its extensive use across the internet.
• Platforms like WordPress, Drupal, Joomla, and Magento are built on PHP, meaning the flaw had widespread potential impact.
• Experts noted that the vulnerabilities would have been extremely difficult for human hackers to find and exploit manually.
• The use of AI tools significantly accelerated the discovery process, enabling the identification of complex, long-standing bugs.
• The Dutch cybersecurity agency and Wikipedia were among the entities that proactively took systems offline as a precautionary measure.
• The incident highlights the dual nature of AI in cybersecurity: a powerful tool for discovering vulnerabilities and a potential aid for malicious actors to reverse-engineer fixes.
• Wiz coordinated with the PHP team, OpenAI, and other tech giants like Google Cloud, Cloudflare, Amazon's AWS, and Microsoft for discovery and patch verification.

Scientific/Technical Concepts Involved:

• PHP: A server-side scripting language designed for web development, used to create dynamic and interactive web pages.
• Vulnerability: A weakness in a system or software that can be exploited by an attacker to compromise its security.
• Artificial Intelligence (AI): The simulation of human intelligence processes by machines, especially computer systems, used here for automated vulnerability research.
• Reverse Engineering: The process of analyzing a system to understand its design, architecture, or code, which AI can now do rapidly for software flaws.