The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
Critical web security flaws spark global alarm as Google, OpenAI and Amazon respond
- Published
- Record updated
Summary
Google, OpenAI and Amazon are responding to two critical PHP vulnerabilities, collectively called "PHP2Shell," that could let attackers remotely execute malicious code on affected servers. Amazon said its MadPot system detected exploitation attempts before public disclosure, though it is unclear how attackers learned of the flaws in advance. The U.S. National Security Agency and FBI, along with cybersecurity authorities in several other countries, issued warnings to organizations running PHP-based systems.
Mitigation
The NSA recommended that organizations using PHP prepare security updates addressing the vulnerabilities and take affected systems offline until they are fully addressed if immediate updates are not possible. Cloudflare said it deployed protections against the PHP2Shell vulnerabilities through its web application firewall.