Why AI could threaten much of the world’s digital infrastructure

Earlier this month, authorities worldwide urged website administrators to execute emergency updates after a nonprofit programming foundation flagged critical security flaws that could allow hackers to breach systems.

Government and corporate websites briefly went offline to patch the vulnerabilities, nicknamed PHP2Shell, which were discovered by independent cybersecurity experts using artificial intelligence (AI).

Recommended Stories

list of 3 items

• list 1 of 3What’s the PHP coding flaw that could pull down 70 percent of the internet?
• list 2 of 3World leaders warn of security flaws found in PHP programming language
• list 3 of 3OpenAI says its agents turned off own safeguards

end of list

The vulnerabilities were embedded in the code of a widely used open-source web programming language, PHP, for more than a decade. They had gone unnoticed, however, because it would have been too complicated for humans to exploit them without the use of advanced AI.

But cybersecurity experts, as well as those maintaining important software, say PHP2Shell could be the first in a deluge of security flaws exposed by emerging AI. They say much of the world’s most critical digital infrastructure is maintained by volunteers, who often lack the resources and time to respond to newly discovered threats.

“There’s been a lot of people in the AI safety community that said this is one of the first areas where we are going to see the harmful impact of AI,” said Peter Slattery, a research scientist at MIT’s FutureTech, who studies how cybersecurity experts are dealing with the new technology and tracks real-world incidents involving AI.

A digital world built on volunteer work

PHP got its start in 1995, when Danish-Canadian programmer Rasmus Lerdorf sought to track how many people visited his online resume. Over time, others around the world improved Lerdorf’s software, and it grew in popularity.

A deluge of new bugs to fix

When a major security flaw like PHP2Shell is uncovered, it often comes down to a handful of volunteers to fix it.