跳到正文
The Verge · AI· Terrence O’Brien·· 2 小时前精选AI 评分82

PHP 两个漏洞波及大量网站,多个平台一度下线

PHP: The three little letters wreaking havoc across the web

AI 导读

PHP 中被发现的两个漏洞使大量网站面临风险,据称约 70% 的网站以某种方式使用 PHP,Wikipedia、WordPress、Drupal 以及 DeviantArt、4Chan 等平台受影响,其中 DeviantArt 和 4Chan 在漏洞披露后暂时关停。

推荐理由

PHP 两个漏洞波及约七成网站,文中还提到 GPT-5.6 Sol 被用于定位该漏洞。

正文 · 原文
Cybersecurity illustration by Carlo Cadenas.

Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger.

By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.

But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.

Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”

来源:The Verge · AI · theverge.com