Network infrastructure exposes weaknesses; risks due to dependence on common specifications - PHP issue

[Washington Current Affairs] The world was shocked. The discovery of vulnerabilities in the programming language PHP has exposed the structural risks of relying on common specifications for internet infrastructure that is deeply rooted in society. While artificial intelligence (AI) is rapidly improving in performance, making it easier to discover and exploit weaknesses, security measures have not kept up, making it a target.

"There is no perfect mitigation strategy, and updating is the only safe option." The PHP development team released a patch on the 21st and called out the following.

PHP is widely used by about 70% of the world's websites. Governments and companies around the world were forced to respond by shutting down their websites until updates were made.

There were signs that the company had been targeted even before the flaw was made public. Amazon.com announced on the 21st that it had confirmed multiple attack attempts four days prior to the announcement. Although it is unclear whether it was successful on actual websites, he cautioned that the vulnerability is "currently being widely exploited." He also appealed for countermeasures to be taken after the release, noting that AI has made it easier to create attack methods that exploit weaknesses based on information before and after corrections.

However, the defense posture is not rock solid. Prince, CEO of U.S. IT company Cloudflare, said that the number of exploit attempts has increased from a few thousand to more than a million before and after the fix. The PHP Foundation says its security measures "rely on a small number of developers and volunteers."

It is difficult to pinpoint the extent of the impact, and the European Commission and other organizations pointed out on the 21st that ``even if it does not appear that they are directly using the system, they may be affected.'' Another major concern is that the old system that used PHP remains widespread in society.

According to data from a European research institute, about half of the sites that use PHP use an older version that is no longer maintained by the developer. The revised version is only partially available and may be left in a dangerous state.

There are other common internet infrastructures other than PHP that many services depend on. If vulnerabilities were exploited as in this case, the impact would be felt around the world, potentially causing major disruption to administrative, financial, and economic activities.