A pair of newly disclosed security flaws in PHP, one of the most widely used programming languages on the web, has set off a global race to patch systems. India’s Computer Emergency Response Team, known as CERT-In, has flagged the vulnerabilities, and security teams around the world are now checking whether their websites and applications are exposed.<\/p>\n
PHP powers a huge share of the internet. Popular tools such as WordPress, Wikipedia and many online stores run on it. That reach is why a serious flaw in PHP can quickly become a problem for millions of sites at once.<\/p>\n
The discovery came from research that used multiple artificial intelligence models to help identify the problems. Google Cloud executives Chris Betz, the company’s chief information security officer, and Raluca Ada Popa, head of Gemini Security at Google DeepMind, said PHP and cybersecurity firm Wiz Research disclosed the two vulnerabilities after that research. The AI models were used both to find the flaws and to help fix them.<\/p>\n
This is notable because it shows how AI is changing security work. Finding bugs in complex software is slow and expensive. AI tools can scan large amounts of code quickly and point researchers toward weak spots that humans might miss. In this case, the same technology helped with remediation, meaning the work of closing the holes.<\/p>\n
Security experts have long warned that AI could help attackers write better malware. This case shows the other side. Defenders can use the same tools to find and fix problems faster. The race between attackers and defenders is now partly a race between their AI tools.<\/p>\n
Google Cloud said its own infrastructure was not vulnerable to the flaws. However, the company warned that customers running PHP applications on its platform could still be exposed. That distinction matters. The cloud provider secures the underlying servers, but customers are responsible for their own applications and code.<\/p>\n
This shared responsibility model is common across cloud computing. A safe data center does not protect a poorly patched website running inside it. Businesses that host PHP apps on any cloud platform should check their versions and apply updates quickly.<\/p>\n
CERT-In issues alerts to help organizations in India respond to cyber threats. When it flags a vulnerability, government agencies, banks and companies typically review their systems and roll out patches. The warning adds pressure on firms to act fast, especially those running older versions of PHP that may no longer receive official support.<\/p>\n
Older, unsupported software is a common weak point. Once a version stops getting security updates, any new flaw found in it stays open forever unless the system is upgraded.<\/p>\n
For investors, the story is a reminder that cyber risk is a business risk. A major breach can hurt revenue, reputation and share prices. Companies that respond quickly to warnings tend to suffer less damage.<\/p>\n
Businesses should take a few practical steps. First, confirm which versions of PHP their websites use. Second, apply the official patches as soon as possible. Third, review logs for signs of unusual activity. Finally, plan upgrades for any software that is no longer supported.<\/p>\n
The incident also highlights the growing role of AI in cybersecurity. Companies that invest in modern security tools and skilled teams may be better placed to handle the next disclosure. With software supply chains growing more complex, fast patching is no longer optional. It is a basic part of running a safe digital business.<\/p>\n","protected":false},"excerpt":{"rendered":"
PHP Security Flaws Trigger Global Scramble as CERT-In Flags Vulnerabilities A pair of newly disclosed…<\/p>\n","protected":false},"author":1,"featured_media":3968,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"_ti_tpc_template_sync":false,"_ti_tpc_template_id":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-3967","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/posts\/3967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/comments?post=3967"}],"version-history":[{"count":0,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/posts\/3967\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/media\/3968"}],"wp:attachment":[{"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/media?parent=3967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/categories?post=3967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m.intradayafl.com\/index.php\/wp-json\/wp\/v2\/tags?post=3967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}