
プログラミング言語PHPの重大な脆弱性を受け、文科省、厚労省、消費者庁などの中央省庁で対応のためのサイト一時停止や緊急メンテナンスが相次いで実施された。
AI-generated summary
プログラミング言語PHPに重大な脆弱性が見つかり、各所での対応が急がれている。
プログラミング言語「PHP」に重大な脆弱(ぜいじゃく)性が見つかった問題で、文部科学省や厚生労働省、消費者庁などの中央省庁では22日までに、対応のため一部のサイトを一時的に停止する動きが相次いだ。
文科省によると、脆弱性を利用したデータ窃取やサイト改ざん、システム乗っ取りなどを防ぐため、修正プログラムを適用した上で、サーバーや関連システムを緊急点検。PHPが使われていた公式サイト上の問い合わせフォームを一時停止した。
他に、同省の担当課などが管理する「リーディングDXスクールサイト」など少なくとも4サイトで緊急メンテナンスを実施。全国の教育委員会や大学、独立行政法人などに修正プログラムの適用を求める事務連絡を出した。
厚労省は「介護サービス情報公表システム」などのサイトを公開停止した。被害報告はなく、予防的な措置だという。
消費者庁は21日から、リコール情報サイトなどの特設サイトを一時停止し、緊急メンテナンスを実施した。これまで不正アクセスは確認されておらず、対応後に順次再開する方針。
AI outlook — possibilities, not facts
停止したサイトの順次再開
Very likely · Within days

The National Institute of Information and Communications Technology (NICT) has pointed out that unauthorized access to corporate servers may be automated by AI. A method was confirmed that analyzes public apps to identify vulnerabilities in backend servers and optimizes the attack content. They are calling for vulnerability checks and access restrictions as countermeasures.

A vulnerability has been discovered in PHP, the programming language used by approximately 70% of websites around the world. The increasing sophistication of AI-based attacks and the vulnerability of maintenance systems that rely on a small number of volunteers are exposed, potentially leading to global chaos.

A vulnerability that has existed in the programming language PHP for more than 10 years has been discovered using AI. It was reported in August of this year, and a revised version has been released, but there is also a risk that attackers will be able to get ahead of themselves due to information leaks. There are concerns about the rapid increase in the number of vulnerabilities discovered by AI.

In response to a serious vulnerability in the programming language PHP, Prime Minister Sanae Takaichi strongly urged the public on social media to apply patches and temporarily suspend websites. The Prime Minister took an unprecedented precaution by blocking the site himself and discussing responses in coordination with the National Cyber Control Office.

Due to the discovery of vulnerabilities in the programming language PHP, websites of government agencies and critical infrastructure have been temporarily suspended in countries around the world. In order to prevent information leaks and cyber attacks, governments around the world are recommending immediate response or system shutdown.

A serious vulnerability has been discovered in PHP, which is widely used to build websites, with the highest rating of "critical". Although the development team has released a revised version, it is still in use on about 70% of the world's websites, and many government agencies, Wikipedia, and other websites are suspending their websites one after another.