The Day the Internet Went Dark: Understanding the Wikipedia Shutdown

Recent AI Bugs Cause Major Issues for Popular Websites

Today, major websites such as 4chan, DeviantArt, Wikipedia, and even the blog where the local bar posts pictures of dogs are facing significant issues due to two bugs found with AI. These “critical vulnerabilities” were discovered in the PHP programming language, which is the backbone of many websites, including those built on WordPress. The impact of these bugs is so severe that some Dutch and Finnish government agencies have taken their sites offline as a precaution. The NSA Cybersecurity account and the UK’s National Cyber Security Center have also recommended organizations to do the same if an immediate update is not feasible. Even popular platforms like Pokémon Home and Pokémon Champions have been affected, as reported by Kotaku.

Long-standing Vulnerabilities Exposed by AI

Although the vulnerability in PHP has been around for about 20 years, its exploitation previously required a complex chain of steps that were challenging for human researchers to achieve. However, the emergence of powerful AI models has made it easier to leverage such obscure bugs into dangerous vulnerabilities.

Significance of the PHP Programming Language

According to W3Techs, PHP is used by 69.3% of known websites that use server-side programming languages, including popular sites like Wikipedia and WordPress. VirusTotal reports that approximately 3.8 million sites running PHP with at least one open port are currently registered.

AI’s Role in Identifying Vulnerabilities

AI security groups such as Calif from OpenAI and Wiz, owned by Google, have played a crucial role in discovering and reporting these vulnerabilities in PHP. The PHP Foundation mentions that while an exploit for one of the vulnerabilities was theorized in 2024, concrete vectors were not found at the time.

Severity of the Vulnerabilities

The PHP Group warns that any site running PHP is at risk due to the two vulnerabilities, which could lead to unauthenticated remote code execution. Hackers could potentially take control of servers, access sensitive data, and execute code on compromised sites.

Implications for Website Owners

Website owners, especially those using hosting services like Hostinger, GoDaddy, or Bluehost, need to ensure their PHP versions are up to date. Managed hosting service users should contact their providers for information on when the fix will be deployed. It is recommended to disable sites with sensitive data until the PHP version is patched.

Protecting Against the Vulnerabilities

Users are advised to stay cautious and check the social accounts of websites they visit frequently for any updates related to the PHP vulnerabilities. Website owners should verify their PHP versions, with older versions requiring an upgrade for security reasons.