Cybersecurity teams worldwide are urgently addressing vulnerabilities in PHP, a programming language used by nearly 70% of websites, following alarming reports of numerous cyber attacks. John Milinovich from Figma highlighted that the recent attacks, if considered individually, would rank among the worst in a year.
The vulnerabilities were identified by researchers from Google's Wiz and AI firm Calif, using advanced AI models. This has led to a scramble among governments and businesses to mitigate potential damage. Experts, including Jason Clinton from Anthropic, warn that the cybersecurity landscape may deteriorate further before improvements are seen, urging security leaders to seek immediate support.
Chris Krebs, former director of the U.S. Cybersecurity and Infrastructure Security Agency, noted that 3% of all critical vulnerabilities have emerged in the past month, emphasizing the urgency for companies, especially smaller ones, to actively manage their security.
Krebs and Milinovich both advocate for proactive measures, such as implementing two-factor authentication and using password managers, to enhance individual and organizational security in this precarious environment