A security event took websites worldwide by surprise last week, crashing some sites while others took their sites down to prevent a breach. PHP, or Hypertext Preprocessor, is the dominant means of connecting a website to stored data. A template webpage can be filled with stored data to fill in the important text and images that make up a website, like that you are reading now,, whether for news, corporate information, or commerce.
As I’ve heard it told, AI explored vulnerabilities in PHP code and found a whopper. The news about this got out before patches could be written and distributed. So, as you might imagine, bad actors were out there trying to exploit the big vulnerability.
I first noticed something might be wrong when I went to check-in for an October 20 flight on an airline and was told our reservations couldn’t be found. I checked again overnight and all was well. A day later, our EAS email distributor worked, but our previous bulletins were missing from the page listings.
Then I received an email on October 25 in the middle of the night from our web host Dreamhost saying to immediately change all of our passwords for email and web services.
Later the same day, our SBE36.ORG WordPress website, and apparently any hosted by Dreamhost, went offline. Whether this occurred prophylactically or as a failure is not clear from the site status page. Everything was operational within 24 hours once I could access the temporarily missing SFTP site and change the configuration file to reflect the new password.
There are two takes on this. One is that AI will continue to find security issues that may give criminals openings with results ranging from close calls to international disasters. The other is that AI will help us as a tool to find and harden security to prevent such disasters. And both can be true at the same time.