OpenAI 模型发现 PHP 重大安全漏洞，全球网站紧急修补
A major security flaw found using an OpenAI model is causing internet chaos
网络安全公司 Calif 使用 OpenAI 的 GPT-5.6 Sol 在 PHP 中发现两个关键漏洞，OpenAI 称全球 70% 的网站可能受影响，美国国家安全局网络部门建议使用 PHP 的网站下线或更新软件。OpenAI 总裁 Greg Brockman 表示攻击者可利用漏洞窃取用户隐私数据或篡改网站，Cloudflare CTO Dane Knecht 称已出现早期攻击。该漏洞由 Calif 首次发现，Wiz 独立复现，两家公司均属于 OpenAI 主导的 Patch the Planet 计划；微软工程师 Nicolas Bustamante 则指出漏洞是用较旧模型发现的，并担忧新模型将暴露更多漏洞。
推荐理由
AI 评分 89
报道呈现了 AI 模型发现 PHP 高危漏洞后各方紧急修补的连锁反应，以及业内对后续漏洞数量的担忧。
主题
正文
当前显示原文，中文全文译文尚未就绪。
OpenAI said that 70% of the world's websites could be in peril after cybersecurity researchers using its AI models found exploits in a popular programming language.
The National Security Administration's cyber division advised all web providers that use PHP, a widely used open-source language, to take their systems offline or update their software after OpenAI said one of its models found two "critical" flaws in the language's infrastructure.
Greg Brockman, the president of OpenAI, said in an X post that hackers could exploit the vulnerability to steal private user data or modify websites.
"We consider this one of the most impactful security issues in recent memory," OpenAI said in a blog post.
While OpenAI said the vulnerabilities appear to have been identified before any attackers discovered them, the public disclosure set off a race for companies and governments to update their websites and apply fixes before hackers could exploit the bugs.
"We are seeing early attacks emerging and are updating mitigations as new vectors show up," Dane Knecht, Cloudflare's chief technology officer, said in a post on X.
Numerous websites, including those belonging to governments and the media, went offline on Wednesday to address the issue.
PHP is a popular programming language that often handles the behind-the-scenes work powering websites that require user logins and online orders.
The critical flaw was first identified by Calif, a cybersecurity research company using GPT-5.6 Sol. Wiz, another cybersecurity company, independently uncovered the issues, OpenAI said. The companies are part of an OpenAI-led initiative called "Patch the Planet," which aims to make the world's digital infrastructure more secure.
Business Insider has Games!
Add BI in Google so our reporting is easier to find when you’re searching for what matters.
OpenAI has also warned that as cybersecurity researchers continue to probe software vulnerabilities using its ever-advancing frontier models, more security failures will emerge.
An engineer at Microsoft pointed out that the PHP vulnerability was discovered with an older model.
"I don't think the world is prepared for the sheer number of vulnerabilities newer models will uncover," the engineer, Nicolas Bustamante, said on X.
The public disclosure on Wednesday by OpenAI and others of the existence of the exploits triggered urgent messages from leaders worldwide, including the Japanese Prime Minister.
"We have an urgent request for everyone to take action tonight," said Sanae Takaichi.