返回全部动态

PHP 两个严重漏洞波及大半个互联网,AI 模型被用于发现漏洞

原标题:PHP: The three little letters wreaking havoc across the web

The Verge AI安全质量 68

AI 摘要

PHP 编程语言中被发现两个严重漏洞(严重性评分 9.2/10),影响约 70% 的网站,波及近 20 年来几乎所有 PHP 版本。Wikipedia、WordPress、4chan、DeviantArt、互联网档案馆及部分荷兰、芬兰政府网站被迫临时下线,两款日本老游戏因无法打补丁而永久停服。Cloudflare 在漏洞公开后数小时内记录到数百万次利用尝试。安全公司 Wiz 称该漏洞利用链极其复杂,但 GPT-5.6 Sol 等强大 AI 模型使其更易被发现和利用,OpenAI 称有研究者用 GPT-5.6 Sol 在攻击者之前识别出该漏洞。

以上摘要由 AI 生成,可能存在误差。事实请以原文为准。

正文节选

Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger. By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune. But it’s not as simple as updating a few servers. The vulnerability exists in every version o


发布时间:2026-10-22 23:12
抓取时间:2026-10-22 23:45
来源机构:The Verge
阅读原文theverge.com