Recent security vulnerabilities have affected major internet infrastructure, including eMudhra, Node.js, GitLab, Plex, Railway, and OpenCode. Experts from Wiz, Calif, and OpenAI identified the PHP2Shell vulnerabilities in the PHP language using artificial intelligence.
Cloudflare reported that attacks began ten hours before the official disclosure of the vulnerabilities. Within 45 minutes of the announcement, the number of attacks reached tens of thousands, growing to hundreds of thousands within two hours and millions shortly thereafter.
The use of AI has accelerated the discovery and exploitation of software flaws, making brute-force attacks more accessible. Some researchers, such as those at Chainguard, utilized AI to independently identify vulnerabilities and release updates ahead of official announcements.
In response to the threat, many organizations, including Wikimedia and Archive.org, have taken services offline to install security patches. Experts warn that some legacy websites may remain unpatched and face permanent shutdown, potentially leading to significant digital data loss.
