Symbolic imageExperts say PHP patches are not enough as AI raises fears of more flaws
Many websites pulled offline after the PHP flaws were disclosed on Tuesday are back, but security experts say updates alone fall short. Executives warn that AI will find such bugs faster than they can be patched.
Germany's BSI reports no successful attacks so far, according to FAZ, while Check Point's Thomas Boele urges operators to renew API keys, update web application firewalls and inventory their PHP components. Cloudflare chief executive Matthew Prince says exploit attempts have reached the millions. Anthropic's Jason Clinton predicts a "vulnerability tsunami", and Sam Altman said he no longer thinks all bugs can be patched, the Guardian reports.
Russia orders shutdowns
The FSB's cybersecurity center NKTsKI told critical-infrastructure operators on 22 October to consider restricting external access or going offline if they cannot update quickly, Meduza reports, citing a directive obtained by RBC.
Japan takes sites down
Hundreds of Japanese websites went offline for maintenance, Nikkei Asia reports. A Reuters headline says Japan will simulate cyberattacks.
Other opinions
The Guardian says government and private sites in the US and UK temporarily went offline, while Nikkei Asia says American firms mostly preferred quiet fixes without disruption.