Security Flaw Found by AI Sparks Global Website Hacking Alert

[Anchor]

A severe security flaw has been discovered in a core technology powering countless websites worldwide, triggering a state of alarm. Hackers exploiting this vulnerability could reportedly not only seize control of websites but also steal sensitive data. Governments around the globe have urged the prompt installation of security updates.

Correspondent Kim Hyun-woo reports from New York.

[Reporter]

The French government's portal site has ground to a halt.

The Dutch government also blocked access to its portal site, displaying notices that it was undergoing maintenance.

Following news that a critical security loophole had been found in PHP, the programming language used by approximately 70% of websites worldwide, some European countries preemptively blocked access to their sites.

PHP administrators announced that two flaws allowing external servers to be taken over without logging into the site had been confirmed, and hastily distributed a security update at 11:00 PM last night (October 21).

A global alert was issued after it was revealed that the flaw is critical enough to score 9.2 out of 10 on the international standard for evaluating security vulnerabilities.

U.S. security authorities recommended shutting down websites entirely if updates are difficult to apply, and even Japan's prime minister stepped in to urge emergency updates.

[Ryan Austin / Security Firm Researcher: Exploiting this vulnerability is like opening the front door and walking right into a website's server. Attackers can roam freely through internal computer networks and commit all sorts of crimes.]

U.S. media outlets reported that artificial intelligence played a significant role in discovering this security vulnerability.

The flaw, the risks of which had previously gone unrecognized, was uncovered using AI.

[Tomer Schwartz / Security Firm Researcher: This is a problem that went undiscovered for 12 years. That means websites built 5 or 10 years ago still have vulnerable security.]

However, concerns are growing as relevant information was leaked on an online community on the 20th, two days ahead of the scheduled security update release date, prompting officials to rush and advance the release by a day—during which hackers reportedly attempted attacks exploiting the security vulnerability.

PHP admitted fault, stating that signs of the flaw had already been detected during a security audit two years ago but fixes had been delayed, and that the response was slow due to decision-making structures and a shortage of personnel.

(Video reporting: Lee Hee-hoon, Video editing: Park Choon-bae)
※ Please note: This article was translated by AI and may contain errors.