Large-scale cyber attack warning regarding AI-driven PHP vulnerabilities

Amazon has announced that critical security vulnerabilities detected with the help of artificial intelligence models in the PHP programming language, one of the fundamental building blocks of the internet, pose a serious threat to public institutions and companies. Stating that attackers began using these vulnerabilities four days before they were publicly disclosed, the company warned that the flaws are currently being widely exploited.

The U.S. National Security Agency (NSA) and UK authorities have called on all organizations using PHP to update their systems immediately or take vulnerable servers offline. PHP developers have released software updates to address these vulnerabilities. Experts emphasize that these flaws grant attackers direct access to the server's file system or database.

According to estimates by Wiz, approximately 70 percent of websites worldwide use the PHP infrastructure. The fact that widespread platforms such as WordPress are also built on this language increases the scale of the threat. OpenAI stated that artificial intelligence can detect such security vulnerabilities at internet scale, but that the same capabilities can also be used by attackers to develop malicious tools.