사진 확대 [AFP Yonhap News] Deadly security vulnerabilities have been found in the programming language PHP (Hypertext Preprocessor) used by seven out of 10 websites around the world, putting governments and companies on alert. Artificial intelligence (AI) played a decisive role in the discovery of the vulnerability, but on the contrary, there are warnings that attacks by hackers who exploited AI could increase.On the 21st (local time), the PHP Foundation urgently distributed a new version that fixed two security vulnerabilities in the language. The defect falls under the highest ‘lethal’ rating in the international vulnerability assessment criteria, the foundation said. “All users should update immediately.” It has been confirmed that this flaw can be used to issue commands or extract information from a server from outside without an account or password.When this was known, Germany and France blocked access to some government websites. The U.S. National Security Agency (NSA) also recommended that “institutions that cannot be updated immediately should take their systems offline.”PHP is a programming language that creates screens in real time by processing necessary information on a server when a user accesses a website. According to web analysis company W3Techs, about 70% of websites whose language has been identified use PHP.The PHP’s security vulnerabilities were raised decades ago, but they were not noticed because it was too difficult to exploit them. However, as security companies Califf and Wiz found a way to utilize this defect using open AI, they came back to the surface.In Korea, the Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) issued a “caution” warning for cyber crisis in the private sector as of 12 p.m. that day. The decision is based on the judgment that PHP is used on numerous homepages in Korea and the attack code is released, which can lead to massive hacking.The National Security Office also held an “emergency meeting on cybersecurity in the civilian-government-military” presided over by Song Ki-ho, the third deputy director of the National Security Office, and checked the response situation. Deputy Director Song said, “Please complete the action quickly with the original team.”Park Chan-am, head of the National Artificial Intelligence Strategy Committee’s security advisory committee, said, “This vulnerability can only be prevented by applying a security patch,” adding, “Small and medium-sized companies or small websites that lack professional manpower may respond late and the damage may spread.”
Click Here For The Original Source
——————————————————–
