PHP
Yet behind the software that underpins up to 70% of websites worldwide sits an organisation running on scarce resources, a report has said. This week, the discovery of two serious vulnerabilities in PHP triggered an emergency global scramble across governments and corporations. The incident exposed the internet’s immense dependence on a three-decade-old, open-source programming language. The nonprofit PHP Foundation, which maintains and safeguards the language, operates on a very thin budget with a minimal team.
The dual impact of AI
The rapid rise of AI has introduced a double-edged sword for the small team maintaining PHP.
“We received no further indication from OpenAI, Wiz or Calif, with whom we’re working closely on this issue, regarding any issues on patched systems,” Barron stated. Despite its small headcount, the foundation coordinates directly with major technology firms and external security researchers to triage software bugs and engineer defensive patches. On one hand, AI tools served as a vital asset with automated models helping researchers uncover the two security flaws, which had quietly lingered in the codebase for over a decade. Barron acknowledged that the technology has also helped software developers work more efficiently.
To investigate the latest vulnerabilities and verify the emergency fixes released on Wednesday, the foundation collaborated closely with artificial intelligence (AI) labs OpenAI alongside cybersecurity firms Google-owned Wiz and Calif.