Last Week's Critical PHP Warning Was the Tip of the Web Vulnerability Iceberg - CNET

https://www.cnet.com/wp-content/uploads/sites/2/GettyImages-2301068370.jpg

For the past week, software engineers around the globe have been scrambling to update the backend of websites after a team using an OpenAI model discovered two major vulnerabilities in PHP, a critical piece of web software.

PHP, open-source scripting software that underpins as many as 70% of websites worldwide, can become outdated when website owners don’t update to newer versions of the software, making them vulnerable to attacks. Shortly after alerts were issued about the new vulnerabilities, new versions of PHP were issued, and site operators were urged to update. Some government websites went dark in Europe as these updates were applied, but for much of the web, it’s been left to individual website owners to apply the fixes.

But will they?

More from CNET

No law compels them to do so, although if a website suffers a data breach, the owner could be liable to...

Copyright of this story solely belongs to www.cnet.com. To see the full text click HERE

Read more